Lucene search
+L

29 matches found

GithubExploit
GithubExploit
added 2024/12/13 11:42 a.m.763 views

Exploit for Path Traversal in Ghost

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a...

6.5CVSS6.5AI score0.68737EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2024/12/12 6:50 p.m.135 views

Exploit for Path Traversal in Ghost

Ghost Arbitrary File Read Exploit CVE-2023-40028 Over...

6.5CVSS7.5AI score0.68737EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2024/03/23 3:25 p.m.785 views

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

6.5CVSS6.4AI score0.68737EPSS
SaveExploits12
Vulnrichment
Vulnrichment
added 2023/08/15 5:25 p.m.21 views

CVE-2023-40028 Arbitrary file read via symlinks in Ghost

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

4.9CVSS6.6AI score0.68737EPSS
SaveExploits12References2
CVE
CVE
added 2023/08/15 5:25 p.m.303 views

CVE-2023-40028

CVE-2023-40028 affects Ghost CMS versions prior to 5.59.1. The issue arises in the file upload mechanism where authenticated users can upload symlinks, enabling arbitrary file reads on the host (e.g., reading sensitive files outside the Ghost content directory). The primary documented impact is i...

6.5CVSS5.5AI score0.68737EPSS
SaveExploits12References2Affected Software1
Circl
Circl
added 2022/09/21 10:41 p.m.8 views

CVE-2022-40028

creationtimestamp| type| source ---|---|--- 2022-09-21 22:41:19+00:00| seen| https://t.me/cibsecurity/50222...

4.8CVSS4.9AI score0.00482EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/21 6:15 p.m.10 views

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

4.8CVSS5.9AI score0.00482EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/09/21 5:11 p.m.6 views

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

6.1AI score0.00482EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/21 5:11 p.m.60 views

CVE-2022-40028

CVE-2022-40028 affects SourceCodester Simple Task Managing System v1.0. The issue is a cross-site scripting (XSS) vulnerability in the newProjectValidation.php component, exploitable via a crafted payload in the fullName parameter, enabling arbitrary web scripts/HTML execution. Root cause is insu...

4.8CVSS5AI score0.00482EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder