Lucene search
+L

769 matches found

CNNVD
CNNVD
•added 2024/01/27 12:00 a.m.•19 views

Sunlight CMS Security Vulnerability

Sunlight CMS is a content management system from Sunlight CMS open source. A security vulnerability exists in Sunlight CMS version v.8.0.1. A remote attacker can exploit the vulnerability to execute arbitrary code and escalate privileges via a specially crafted script...

5.4CVSS8AI score0.0055EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/25 10:15 p.m.•31 views

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

9.8CVSS9.4AI score0.0079EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/25 12:00 a.m.•17 views

Vistor Management System Security Vulnerability

Vistor Management System is a visitor management system. A security vulnerability exists in Projectworlds Vistor Management System version v.1.0, which stems from a vulnerability that allows a remote attacker to escalate privileges via a crafted script...

9.8CVSS7.1AI score0.0079EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/01/25 12:00 a.m.•15 views

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

7AI score0.0079EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/25 12:00 a.m.•45 views

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

9.6AI score0.0079EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•17 views

PT-2024-19615

Name of the Vulnerable Software and Affected Versions Projectworlds Vistor Management Systemin PHP version 1.0 Description An issue in the system allows a remote attacker to escalate privileges via a crafted script to the login page in the POST/index.php. Recommendations For version 1.0, consider...

9.8CVSS7.1AI score0.0079EPSS
SaveExploits1References8
NVD
NVD
•added 2024/01/20 2:15 a.m.•33 views

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

9.8CVSS9.5AI score0.00982EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/20 1:15 a.m.•17 views

CVE-2023-51892

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component...

9.8CVSS6.2AI score0.00982EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/20 1:15 a.m.•24 views

Design/Logic Flaw

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component...

7.5CVSS8.1AI score0.00982EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/01/20 12:00 a.m.•21 views

Weaver e-cology security breach

Weaver e-cology is a collaborative management application platform from China's Panmicro Technologies Weaver. A security vulnerability exists in Weaver e-cology version v.10.0.2310.01 that could allow a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController...

9.8CVSS7.7AI score0.00982EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/01/20 12:00 a.m.•11 views

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

8AI score0.00982EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/20 12:00 a.m.•4 views

CVE-2023-51892: Undefined Security Weakness

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component...

9.8CVSS8.7AI score0.00982EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/20 12:00 a.m.•7 views

CVE-2023-51906: Undefined Security Weakness

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

9.8CVSS8.7AI score0.00982EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/01/16 3:30 a.m.•34 views

Code injection in mingSoft MCMS

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

7.5CVSS6.5AI score0.01119EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/01/16 3:30 a.m.•53 views

GHSA-H57W-VH34-F8CW Code injection in mingSoft MCMS

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

7.5CVSS7.3AI score0.01119EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/16 2:15 a.m.•33 views

CVE-2023-51282

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

7.5CVSS7.3AI score0.01119EPSS
SaveExploits1References2
Prion
Prion
•added 2024/01/16 2:15 a.m.•26 views

Design/Logic Flaw

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

5CVSS6.7AI score0.01119EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•16 views

MingSoft MCMS Security Vulnerability

MingSoft MCMS is a complete open source J2ee system from China-based MingSoft. A security vulnerability exists in MingSoft MCMS version v.5.2.4, which originated from a vulnerability that allows remote attackers to obtain sensitive information via a carefully crafted script...

7.5CVSS6.5AI score0.01119EPSS
SaveExploits1References3
Mend
Mend
•added 2024/01/16 12:00 a.m.•2 views

CVE-2023-51282

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

8.7CVSS0.01119EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/16 12:00 a.m.•7 views

CVE-2023-51282

An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter...

7.3AI score0.01119EPSS
SaveExploits1References2
Rows per page
Query Builder