CVE-2025-4514

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launch...

CVE-2025-4514

CVE-2025-4514 applies to Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. The vulnerability affects the file /javascript.php ; modifying the Value parameter enables a SQL injection. The issue can be exploited remotely and an exploit has been disclosed publicly. Connected advisories corr...

CVE-2025-4514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launch...

CVE-2012-1207: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...