366 matches found
ThinkPHP Command Execution Vulnerability
Top Thinking Information Technology ThinkPHP is a PHP-based, open source, lightweight Web application development framework from China Top Thinking Information Technology. ThinkPHP3.2.4 previous version used in Open Source BMS v1.1.1 version and other devices in the existence of a command executi...
CVE-2017-18356
In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager privileges. The attacker then constructs a specifically crafted string that will turn into a PHP object injection...
PT-2019-6168
Name of the Vulnerable Software and Affected Versions ThinkPHP versions prior to 3.2.4 Open Source BMS version 1.1.1 zzzcms zzzphp Description A flaw exists in ThinkPHP related to improper handling of code generation when using backslashes '' as delimiters in the controller name. This can allow a...
GROWI vulnerable to cross-site scripting
Overview GROWI provided by WESEEK, Inc. contains a cross-site scripting vulnerability CWE-79. The settings option for enabling and disabling the measures against cross-site scripting "Enable XSS prevention" option was introduced in v3.1.12. However, there was an issue with the implementation wher...
CVE-2018-19506
Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI...
CVE-2018-19596
Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506...
Design/Logic Flaw
Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506...
CVE-2018-19596
Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506...
CVE-2018-19596
Zurmo 3.2.4 is vulnerable to HTML Injection (XSS) in the reports section via an admin using HTML in the report details (app/index.php/reports/default/details?id=1). ThisCVEdescription maps to CVE-2018-19596 and is related to CVE-2018-19506. The connected documents confirm the affected component a...
CVE-2018-19506
Zurmo 3.2.4 is identified as affected by an XSS vulnerability in the reports module. The issue arises when an admin uses the name parameter in the reports section (URI: app/index.php/reports/default/details?id=1), enabling script injection. The NVD entry for CVE-2018-19506 documents this XSS, wit...
CVE-2018-19506
Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI...
phpBB < 3.2.4 RCE Vulnerability
phpBB is prone to a remote code execution RCE vulnerability through object injection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2018-14897 · Phpbb Limited · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 3.2.4 Description: The issue allows for Remote Code Execution through Object Injection by utilizing Phar deserialization. This can be achieved by passing an absolute path to a file exists check. The exploitation of thi...
ThinkPHP SQL Injection Vulnerability (CNVD-2018-21504)
ThinkPHP is an open source, lightweight PHP-based web application development framework. ThinkPHP 3.2.4 version of the Library/Think/Db/Driver.class.php file 'parseOrder' function SQL injection vulnerability, the vulnerability stems from the program incorrectly handles the variable key. remote...
ThinkPHP SQL Injection Vulnerability (CNVD-2018-21507)
ThinkPHP is an open source, lightweight PHP-based web application development framework. A SQL injection vulnerability exists in ThinkPHP version 3.2.4, which stems from the failure of the 'parseKey' function to properly handle the variable key.A remote attacker can exploit this vulnerability to...
CVE-2018-18529
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...
Sql injection
ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...
HPE Device Entitlement Gateway SQL Injection Vulnerability
HPE Device Entitlement Gateway DEG is a set of device entitlement management solutions from Hewlett Packard Enterprise HPE. A SQL injection vulnerability exists in HPE DEG versions 3.2.4, 3.3, and 3.3.1, which can be exploited by remote attackers to inject SQL commands and elevate privileges...