58 matches found
CVE-2020-37186
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...
CVE-2020-37186
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...
CVE-2020-37186
CVE-2020-37186 affects Chevereto 3.13.4 Core. The vulnerability arises in the database configuration installation where the database table prefix parameter can be manipulated to write a PHP shell file and execute arbitrary system commands via a crafted POST request. Impact is high: remote code ex...
CVE-2020-37186 Chevereto 3.13.4 Core - Remote Code Execution
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...
CVE-2020-37186 Chevereto 3.13.4 Core - Remote Code Execution
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...
Chevereto 代码注入漏洞
Chevereto is a graph-based program. The Chevereto 3.13.4 Core version has a code injection vulnerability, which stems from improper handling of database table prefix parameters. This vulnerability may lead to remote code execution...
PT-2026-7684
Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configuration installation. Attackers can manipulate the database table prefix parameter to write a PHP shell file and execute arbitrary system commands through a...
CVE-2021-31721
Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...
EUVD-2012-2899
Malware in sbrugna...
EUVD-2017-1378
Malware in sbrugna...
EUVD-2012-2898
Malware in sbrugna...
EUVD-2021-18605
Malware in sbrugna...
EUVD-2018-4014
Malware in sbrugna...
Chevereto CMS 3.7.0 SQL Injection
==================================================================================================================================== | Title : Chevereto CMS V3.7.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit...
Chevereto CMS 3.7.0 HTTP Parameter Pollution
==================================================================================================================================== | Title : Chevereto CMS V3.7.0 HPP Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit | | Vendo...
Server-Side Request Forgery (SSRF) in chevereto/chevereto-free
Description Attackers can make the server perform arbitrary requests to internal IPs as well as use the file:/// protocol to disclose internal image data. Proof of Concept 1: Create a valid image file on the server /path/to/index.png 2: Choose add Image URLs and use a valid URL and click OK. Then...
Cross-site Scripting (XSS) - Stored in chevereto/chevereto-free
✍️ Description Stored xss via image upload TESTED VESRION latest github code as of 16/7/21 🕵️♂️ Proof of Concept 1. First download https://github.com/ranjit-git/poc/blob/master/xss%22'%3E%3Cimg%20src%3Dx%20onerror%3Dalert123%3E.jpeg image file in linux . Dont change the file name . This type file...
CVE-2021-31721
Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...
CVE-2021-31721
Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...
Cross site scripting
Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...