429 matches found
Cross site request forgery (csrf)
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...
CVE-2018-19138
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...
CVE-2018-19138
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI...
CVE-2018-19115
keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extractstatuscode in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap...
PCManFTPD 2.0.7 Server APPE Command Buffer Overflow
!/usr/bin/python Exploit Title: PCManFTPD 2.0.7 Server APPE Command - Buffer Overflow Exploit Date: 30/10/2018 Exploit Author: DC - Telspace Systems Vendor Homepage: http://pcman.openfoundry.org/ Contact: [email protected] Version: 2.0.7 Tested on: Windows XP Prof SP3 ENG x86 CVE:...
Fiyo CMS Cross-Site Scripting Vulnerability (CNVD-2018-21626)
Fiyo CMS is a content management system CMS for creating CMS templates. A cross-site scripting vulnerability exists in the dapur\apps\appuser\edituser.php page in Fiyo CMS version 2.0.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'name'...
Design/Logic Flaw
Fiyo CMS 2.0.7 has XSS via the dapur\apps\appuser\edituser.php name parameter...
CVE-2018-18545
Fiyo CMS 2.0.7 has XSS via the dapur\apps\appuser\edituser.php name parameter...
PHPMailer < 2.0.7 / 2.1, 2.2 < 2.2.1 Email Header Injection Vulnerability
PHPMailer is prone to an email header injection vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Elefant CMS Code Execution Vulnerability
Elefant CMS is a PHP-based content management system CMS. The system includes features such as an events calendar, contact form, social media integration and member login. A security vulnerability exists in the apps/filemanager/upload/drop.php file in Elefant CMS versions prior to 2.0.7. An...
Feindura Cross-Site Scripting Vulnerability
feindura is a set of open source CMS Content Management System written in PHP. A cross-site scripting vulnerability exists in the index.php?category=0&page=new page in feindura version 2.0.7, which can be exploited by a remote attacker to execute malicious script in the browser with the help of t...
Input validation
An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with ?php content, because of insufficient input validation in...
CVE-2018-16728
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new...
CVE-2018-16728
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new...
Design/Logic Flaw
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new...
CVE-2018-16728
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new...
CVE-2018-16728
Feindura 2.0.7 contains a Cross-Site Scripting (XSS) vulnerability exposure in the tags field when creating a new page (index.php?category=0&page=new). This is documented across multiple feeds (NVD/CNVD/OSV etc.) and is specific to feindura 2.0.7. The underlying issue is an XSS entry that could a...
Code injection
In Miniz 2.0.7, tinfldecompress in miniztinfl.c has an infinite loop because sym2 and counter can both remain equal to zero...