48 matches found
Juniper-CVE-2023-36845-Mass-Hunting
Juniper-CVE-2023-36845-Mass-Hunting Juniper RCE Remote Code Execution CVE-2023-36845 is a vulnerability that has been identified within Juniper's software. This particular flaw allows for remote code execution, meaning an attacker could run arbitrary code on a system without needing physical acce...
CVE-2025-13275
A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...
CVE-2025-13275 Iqbolshoh php-business-website about.php unrestricted upload
A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...
CVE-2025-13275: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...
PHP Business Website Code Issues and Vulnerabilities
PHP Business Website is a PHP business website by the individual developer Iqbolshoh Ilhomjonov. PHP Business Website suffers from a code issue vulnerability that stems from incorrect manipulation of the file /admin/about.php, which could lead to unlimited uploads...
EUVD-2019-10775
Malware in sbrugna...
CVE-2024-41376
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...
CVE-2024-41376
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...
CVE-2024-41376: Path Traversal: 'dir\..\..\filename'
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...
AVideo cross-site scripting vulnerability in the view/about.php page
The PHP file view/about.php is vulnerable to an XSS issue due to no sanitization of the user agent. At line 53, the website gets the user-agent from the headers through $SERVER'HTTPUSERAGENT' and echo it without any sanitization. In PHP, echo a user generated statement, here the User-Agent Header...
Duplicate Advisory: AVideo cross-site scripting vulnerability in the view/about.php page
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f98p-2hc5-fm7v. This link is maintained to preserve external references. Original Description WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...
Sql injection
A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2020-36543 SialWeb CMS about.php sql injection
A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
PT-2022-8994
Name of the Vulnerable Software and Affected Versions SialWeb CMS affected versions not specified Description A critical issue was found in SialWeb CMS, affecting an unknown part of the file /about.php. The manipulation of the Id argument leads to sql injection. It is possible to initiate the...
CVE-2020-36543: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
PT-2022-12249
Name of the Vulnerable Software and Affected Versions Online-Movie-Ticket-Booking-System version 1.0 Description The issue concerns a lack of input validation on the id parameter in the about.php file. This allows an attacker to append SQL queries to the input, potentially extracting sensitive...
CVE-2021-44866: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database...
CVE-2019-20221
In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...