CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2024/02/16 12:00 a.m.•13 views

CVE-2024-25415: Improper Control of Generation of Code

A remote code execution RCE vulnerability in /admin/definelanguage.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php...

7.2CVSS8.7AI score0.27237EPSS

SaveExploits1References3

Mend•added 2024/02/16 12:00 a.m.•10 views

CVE-2024-25415

8.6CVSS8.6AI score0.27237EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2020/10/28 12:00 a.m.•10 views

CVE-2020-27975: Cross-Site Request Forgery (CSRF)

osCommerce Phoenix CE before 1.0.5.4 allows admin/definelanguage.php CSRF...

8.8CVSS5.8AI score0.00612EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by