CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

CVE-2020-21862

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

CVE-2020-21862

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

Unrestricted file upload

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

Directory traversal

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

CVE-2020-21862

CVE-2020-21862 is a directory traversal vulnerability in DuxCMS 2.1 that allows an attacker to delete arbitrary files via the /admin/AdminBackup/del endpoint. The issue is rooted in a traversal flaw in the AdminBackup API, enabling unauthorized file deletion and potential data loss. Public detail...

CVE-2020-21861

CVE-2020-21861 concerns DuxCMS 2.1 with a file upload vulnerability in duxcms/AdminUpload/upload that allows attackers to execute arbitrary PHP code. The affected software is DuxCMS 2.1; the vulnerable trigger is the AdminUpload/upload endpoint, enabling arbitrary code execution with high impact ...

PT-2023-11605 · Duxcms · Duxcms

Name of the Vulnerable Software and Affected Versions: DuxCMS version 2.1 Description: A directory traversal issue allows attackers to delete arbitrary files via the /admin/AdminBackup/del API endpoint. This enables attackers to potentially disrupt system functionality or destroy sensitive data...

CVE-2020-21862

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

Advisory ROSA-SA-2023-2181

Software: Grafana 6.7.4 OS: ROSA Virtualization 2.1 packageevrstring: grafana-6.7.4-3.rv3.src.rpm CVE-ID: CVE-2023-3128 BDU-ID: 2023-03343 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the Grafana web-based data submission tool is related to authentication bypass via spoofing. Exploitation of...

CVE-2023-3475

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

Cross site scripting

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

CVE-2023-3475

CVE-2023-3475 affects SimplePHPscripts Event Script 2.1. The vulnerability exists in the URL Parameter Handler’s preview.php, enabling cross-site scripting via remote attack. Affected functionality is described as unknown in detail, with impact limited to confidentiality/integrity concerns as per...

PT-2023-24995 · Unknown · Simplephpscripts Event Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Event Script version 2.1 Description: A vulnerability was found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack may be launched remotely. Recommendations: For...

SimplePHPscripts Event Script 跨站脚本漏洞

SimplePHPscripts Event Script is a responsive and mobile-friendly web script from Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Event Script version 2.1, which stems from a problem in the file preview.php that can lead to cross-site scripting...

Event Script 2.1 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Advisory ROSA-SA-2023-2172

Software: libtar 1.2.20 OS: ROSA Virtualization 2.1 packageevrstring: libtar-1.2.20-17.rv3 CVE-ID: CVE-2021-33644 BDU-ID: None CVE-Crit: HIGH CVE-DESC: An attacker who sends a created tar file with a size in the header structure equal to 0 could cause a call to malloc0 for the gnulongname variabl...