581 matches found
Monstra CMS Arbitrary File Deletion Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A security vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4. An attacker can...
CVE-2018-16820
admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests...
Arbitrary file deletion
admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...
CVE-2018-16819
Summary : CVE-2018-16819 affects Monstra CMS 3.0.4. The admin/index.php endpoint allows arbitrary file deletion via crafted parameters (id=filesmanager&path=uploads/…&delete_file=). The vulnerability is described across multiple sources as an arbitrary file deletion flaw in Monstra CMS 3.0.4. Aff...
Monstra CMS HTTP Header Injection Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An HTTP header injection vulnerability exists in the 'cfg' parameter of the...
Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03469)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...
Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03473)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...
CVE-2018-17024
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an addpage action...
CVE-2018-17026
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage&name=error404 action, a different vulnerability than CVE-2018-10121...
Monstra CMS Arbitrary PHP Code Execution Vulnerability (CNVD-2019-03475)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An arbitrary PHP code execution vulnerability exists in Monstra CMS version 3.0.4, which stems from the...
CVE-2018-16608
Monstra CMS 3.0.4 is affected by an Insecure Direct Object Reference (IDOR) in admin/index.php?id=users&action=edit&user_id=1, allowing an attacker with Editor privileges to change the administrator password. The root cause is direct object reference exposure in the user-management endpoint, enab...
Malwarebytes Anti-Malware Consumer 'Whitelist' Security Bypass Vulnerability
Malwarebytes Anti-Malware Consumer is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-14922
CVE-2018-14922 : Monstra CMS 3.0.4 contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the first name or last name fields on the profile edit page. The issue is documented across multiple sources (NVD entry and OSVDB/CVE ...
PHP Scripts Mall Naukri/Shine/Jobsite Clone Script Denial of Service Vulnerability
PHP Scripts Mall Naukri/Shine/Jobsite Clone Script is a PHP and MySQL based job site system script by PHP Scripts Mall India. A denial of service vulnerability exists in PHP Scripts Mall Naukri/Shine/Jobsite Clone Script version 3.0.4. A remote attacker can exploit this vulnerability to cause a...
CVE-2018-15185
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service page update outage via crafted PHP and JavaScript code in the "Current Position" field...
CVE-2018-15184
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
CVE-2018-15184
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795...
Security Bulletin: Financial Transaction Manager for ACH Services has a potential input validation vulnerability (CVE-2018-1392)
Summary Financial Transaction Manager FTM for ACH Services has addressed a potential input validation vulnerability for some web services in the web services component. Vulnerability Details CVEID: CVE-2018-1392 DESCRIPTION: IBM Financial Transaction Manager for ACH Services for Multi-Platform...
Monstra CMS Security Bypass Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A security vulnerability exists in the plugins/box/users/users.plugin.php file in Monstra CMS version 3.0.4. ...