CVE-2020-19896

File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php...

CVE-2019-19896

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files e.g., bat-scripts, which allows execution of code in the context of NT...

CVE-2020-19896

creationtimestamp| type| source ---|---|--- 2022-06-29 02:36:32+00:00| seen| https://t.me/cibsecurity/45347...

CVE-2020-19896

CVE-2020-19896 affects Minicms v1.9 and is a file inclusion vulnerability that lets remote attackers execute arbitrary PHP code via the file post-edit.php. The NVD metrics indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no user interaction, and impacts...

CVE-2019-19896

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files e.g., bat-scripts, which allows execution of code in the context of NT...

CVE-2019-19896

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files e.g., bat-scripts, which allows execution of code in the context of NT...

CVE-2019-19896

The CVE refers to CVE-2019-19896 in IXP EasyInstall 6.2.13723, where remote code execution is possible due to weak permissions on the Engine Service share. The default IXP$ share permissions allow modification of directories/files (e.g., bat-scripts), enabling code execution in the NT AUTHORITY\S...

CVE-2018-19896

ThinkCMF X2.2.2 has SQL Injection via the function delete in SlideController.class.php and is exploitable with the manager privilege via the ids parameter in a slide action...

CVE-2018-19896

ThinkCMF X2.2.2 is affected by a SQL injection via delete() in SlideController.class.php, exploitable with manager/admin privileges through the ids[] parameter in a slide action. Connected sources confirm the vulnerability details but do not provide a patch/version remediation in the documents. N...