434 matches found
Code-Projects Student File Management System SQL注入漏洞
Student File Management System is a student file management system. A SQL injection vulnerability exists in Student File Management System due to mishandling of the istoreid parameter by an unknown function module in the /download.php file. An attacker can use this vulnerability to obtain or tamp...
PT-2025-53793
Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A flaw exists in Student File Management System version 1.0 that allows for remote code execution. The issue is related to SQL injection within the /download.php file,...
CVE-2025-15205: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...
CVE-2025-63950: Deserialization of Untrusted Data
An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...
CVE-2025-68116: Improper Neutralization of Input During Web Page Generation
FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting XSS due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attacker who can get a crafted SVG primary or...
CVE-2025-34331: Missing Authentication for Critical Function
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script. The endpoint exposes a file download mechanism that lacks access control, allowing remote, unauthenticated users to request...
EUVD-2025-34547
The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to delete arbitrary files from the...
CVE-2025-11692: Missing Authorization
The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to delete arbitrary files from the...
EUVD-2008-0820
Malware in sbrugna...
EUVD-2009-4589
Malware in sbrugna...
EUVD-2005-3673
Malware in sbrugna...
EUVD-2006-6121
Malware in sbrugna...
EUVD-2010-1525
Malware in sbrugna...
EUVD-2008-6258
Malware in sbrugna...
EUVD-2010-3454
Malware in sbrugna...
EUVD-2018-6499
Malware in sbrugna...
EUVD-2019-3281
Malware in sbrugna...
EUVD-2018-18167
Malware in sbrugna...