Lucene search
K

7 matches found

0day.today
0day.today
added 2024/04/02 12:0 a.m.328 views

Online Hotel Booking In PHP 1.0 - Blind SQL Injection (Unauthenticated) Exploit

Exploit Title: Online Hotel Booking In PHP 1.0 - Blind SQL Injection Unauthenticated Exploit Author: Gian Paris C. Agsam Vendor Homepage: https://github.com/projectworldsofficial Software Link: https://projectworlds.in/wp-content/uploads/2019/06/hotel-booking.zip Version: 1.0 Tested on:...

7.4AI score
Exploits0
NVD
NVD
added 2023/08/30 5:15 p.m.10 views

CVE-2023-40597

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk...

8.8CVSS8.2AI score0.00067EPSS
Exploits0References2
OSV
OSV
added 2023/08/30 5:15 p.m.1 views

CVE-2023-40598

In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From there, a user can execute arbitrary code ...

8.8CVSS6.1AI score0.00113EPSS
Exploits0References2
Prion
Prion
added 2023/08/30 5:15 p.m.19 views

Code injection

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code...

6.5CVSS8.8AI score0.00572EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/08/30 4:19 p.m.17 views

CVE-2023-40594 Denial of Service (DoS) via the ‘printf’ Search Function

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the printf SPL function to perform a denial of service DoS against the Splunk Enterprise instance...

6.5CVSS7.6AI score0.00142EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/30 12:0 a.m.4 views

PT-2023-27528 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.12 Splunk Enterprise versions prior to 9.0.6 Splunk Enterprise versions prior to 9.1.1 Description: The issue allows an attacker to perform a denial of service DoS against the Splunk Enterprise instance...

7.5CVSS7.2AI score0.00142EPSS
Exploits0References4
CVE
CVE
added 2020/05/08 3:49 p.m.132 views

CVE-2020-12737

CVE-2020-12737 affects Maxum Rumpus on macOS prior to version 8.2.12. The issue is a path traversal vulnerability where authenticated users can use double-escaped characters to read arbitrary files on the server. Impact is read access to sensitive files; no other compromises are specified. Remedi...

6.5CVSS6.3AI score0.00536EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder