elFinder Web file manager Version - 2.1.53 Remote Command Execution

Exploit Title: elFinder Web file manager Version: 2.1.53 Remote Command Execution Date: 23/11/2023 Exploit Author: tmrswrr Google Dork: intitle:"elFinder 2.1.53" Vendor Homepage: https://studio-42.github.io/elFinder/ Software Link: https://github.com/Studio-42/elFinder/archive/refs/tags/2.1.53.zi...

Arbitrary File Read

nuovo/spreadsheet-reader is vulnerable to an Arbitrary File Read. The library ships with a test.php file in the root-directory, which can be called via a HTTP GET with an arbitrary path as a value for the File parameter, which allows attackers to gain access to an arbitrary file...

CVE-2023-29887

CVE-2023-29887 concerns a Local File Inclusion in Nuovo Spreadsheet Reader 0.5.11, specifically in test.php, allowing an attacker to include arbitrary files via the File parameter. The vulnerability arises from LFI in a PHP library’s test.php file, enabling potential data disclosure (confidential...

CVE-2023-29887: Improper Limitation of a Pathname to a Restricted Directory

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter...

CVE-2023-1681

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2023-1681: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

Xunrui CMS 安全漏洞

Xunrui Cloud Software Development XunRuiCMS Xunrui CMS is an open source content management system CMS from China's Xunrui Cloud Software Development Company. A security vulnerability exists in Xunrui CMS version 4.61, which originates from an unknown function in the /config/myfield/test.php file...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18671

Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...

Cross site scripting

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18670: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18671: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...

Mongo Web Admin 6.0 Information Disclosure

Exploit Title: Mongo Web Admin 6.0 - Information Disclosure Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mongoadmin.org/ Software Link: https://netix.dl.sourceforge.net/project/mongo-web-admin/mongoDesktopAdminSetup-beta-6.exe Version: 6.0 Category: Webapps...

scrmetal.de Improper Access Control vulnerability

Open Bug Bounty ID: OBB-677673 Description| Value ---|--- Affected Website:| scrmetal.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

mcqforall.co.in XSS vulnerability

Open Bug Bounty ID: OBB-558252 Description| Value ---|--- Affected Website:| mcqforall.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

teacher.buet.ac.bd XSS vulnerability

Vulnerable URL: http://teacher.buet.ac.bd/sid/test.php?type=info=json=prompt/OPENBUGBOUNTY/...

Pligg CMS 2.0.2 CSRF漏洞

创建一个新文件，然后写入一个web后门，拿到webshell. 我们可以用另外一个方法也是可以用来getshell，先利用第一个漏洞编辑站点目录index.php，接着我们编辑保存下。 然后运保存成功后，查看index.php，然后就生成了test.php文件...

crackfind.com XSS vulnerability

Vulnerable URL: http://www.crackfind.com/test.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 153081 Google Pagerank| 2 VIP website status:| No Check crackfind.com SSL...