34 matches found
EUVD-2008-5904
Malware in sbrugna...
EUVD-2018-6838
Malware in sbrugna...
EUVD-2018-6839
Malware in sbrugna...
EUVD-2008-5903
Malware in sbrugna...
EUVD-2018-7437
Malware in sbrugna...
CMS ISWEB SQL Injection Vulnerability
CMS ISWEB is a content management system CMS. A SQL injection vulnerability exists in CMS ISWEB version 3.5.3. A remote attacker can exploit this vulnerability to inject malicious query statements into the application and obtain sensitive information...
CVE-2018-14956
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information...
Sql injection
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information...
Directory traversal
CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...
CVE-2018-14956: Improper Neutralization of Special Elements used in an SQL Command
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information...
CVE-2018-14957: Improper Limitation of a Pathname to a Restricted Directory
CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...
CVE-2018-14956
CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information...
PT-2018-12832
Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.5.3 Description The issue allows an attacker to inject malicious SQL queries into the application, potentially obtaining sensitive information. Recommendations For CMS ISWEB version 3.5.3, update to a newer version that...
PT-2018-12833
Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.5.3 Description The issue allows for directory traversal and local file download. This can be demonstrated through the "moduli/downloadFile.php" endpoint with a file parameter set to oggetto documenti/../.././inc/config.php...
CVE-2018-14956
CVE-2018-14956 affects CMS ISWEB 3.5.3. The vulnerability is SQL injection in the web application, enabling a remote attacker to inject malicious queries and obtain sensitive information. The PacketStorm page provides a PoC and details indicating an attacker could access the entire database and p...
CMS ISWEB 3.5.3 SQL Injection
Description CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information. ------------------------------------------ Additional Information PoC Prints: https://imgur.com/a/buXJJKC ?id=1'...
CMS ISWEB Cross-Site Scripting Vulnerability
CMS ISWEB is a content management system CMS. A cross-site scripting vulnerability exists in the index.php file in CMS ISWEB version 3.5.3. A remote attacker can inject arbitrary web scripts or code with the help of the 'ordineRis', 'sezioneRicerca' or 'ogettiRicerca' parameter. parameter...
CVE-2018-15562
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php...