748 matches found
CVE-2023-38920
A Cross-Site Scripting (XSS) vulnerability exists in Cyber Cafe Management System (CCMS) v.1.0 , developed by Anuj Kumar. The flaw allows a local attacker to execute arbitrary code by submitting a crafted script via the adminname parameter. This issue stems from the improper neutralization of inp...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
PT-2024-34505 · Hoosk · Hoosk
Name of the Vulnerable Software and Affected Versions: Hoosk version 1.7.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. Recommendations: For Hoosk version 1.7.1, consider disabling access to the config.php component...
CVE-2024-51055: Improper Neutralization of Input During Web Page Generation
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51055
Hoosk version 1.7.1 is vulnerable to remote code execution (RCE) due to an issue where a crafted script can be targeted at the config.php component. This vulnerability allows a remote attacker to execute arbitrary code. To mitigate the risk, it is recommended to disable access to the config.php c...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
python-gevent: privilege escalation via a crafted script to the WSGIServer component
A flaw was found in python-event, which could allow a remote attacker to gain elevated privileges on the system, caused by a flaw in the WSGIServer component. By using a specially crafted script, an attacker can gain elevated privileges...
CVE-2024-51358
Linux Server Heimdall version 2.6.1 is vulnerable to an issue in the Add new application feature. A remote attacker can exploit this by sending a crafted script to execute arbitrary code . Additionally, a Server-Side Request Forgery (SSRF) vulnerability exists in the same feature, which allows re...
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
Heimdall 安全漏洞
Heimdall is an open source application panel and launcher for LinuxServer.io. A security vulnerability exists in Heimdall version v.2.6.1, which originates from a remote attacker who can execute arbitrary code via a specially crafted script that adds a new application...
CVE-2024-27524
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the newticket.php component...
CVE-2024-27525
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component...
CVE-2024-48195
Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...
PT-2024-33019 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: eyouCMS version 1.6.7 Description: The issue allows a remote attacker to obtain sensitive information by sending a crafted script to the post parameter. Recommendations: For eyouCMS version 1.6.7, consider restricting access to the post...
CVE-2024-48204
SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-48204
The Hanzhou Haobo network management system version 1.0 is affected by a SQL injection vulnerability. A remote attacker can exploit this flaw by providing a crafted script to achieve arbitrary code execution . While the technical impact is categorized as CRITICAL (CVSS 3.1 score of 9.8), there is...