PT-2022-20723

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.0 Description The issue allows attackers to execute arbitrary code via a crafted php file, exploiting an arbitrary file upload vulnerability in the /images/background/1.php endpoint. Recommendations For SolarView...

CVE-2022-31374: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

mersinisrehberi.com XSS vulnerability

Open Bug Bounty ID: OBB-596188 Description| Value ---|--- Affected Website:| mersinisrehberi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FengCms交互式Getshell

简要描述： 小问题组合造成。 详细说明： 首先我们来留言这。 http://10.10.10.1/messageadd.html 图中 内容 那个框中具体如下 产品型号 : wooyun - 1 " onmouseover="c=new...

CVE-2008-5804

CVE-2008-5804 is a SQL injection in the admin/admin_catalog.php component of the e-topbiz Number Links 1 Php Script. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action. CVSS2 metrics indicate network access, no authentication, low ac...

CVE-2008-5804: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admincatalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action...