6 matches found
CVE-2020-16656
CVE-2020-16656 entry is rejected/not used and does not represent an active vulnerability.
CVE-2019-16656
Joyplus-cms 1.6.0 is vulnerable to remote code execution via /install by placing PHP code in the name of a database object. Root cause: unsafe handling of object-name data allows execution of arbitrary PHP on the server. Impact is described as high/critical (CVSS v3.1: 9.8, NETWORK, NONE privileg...
CVE-2018-16656
DoBoxCstmBoxInfo.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers to read the documents of arbitrary users via a modified HTTP request...
CVE-2018-16656
CVE-2018-16656 affects Kyocera TASKalfa 4002i and 6002i devices, where the DoBox_CstmBox_Info.model.htm component can be manipulated via HTTP to read other users’ documents. The available connected data identify the affected models and the root cause as improper handling of a modified HTTP reques...