Lucene search
+L

3 matches found

CNNVD
CNNVD
•added 2022/01/12 12:00 a.m.•15 views

ChronoEngine ChronoForms 路径遍历漏洞

ChronoEngine ChronoForms is ChronoEngine company an easy to use and flexible Joomla form builder . A path traversal vulnerability exists in ChronoEngine ChronoForms that stems from the product failing to properly filter for special elements in the path of a resource or file. An attacker could use...

5.3CVSS5.6AI score0.08389EPSS
SaveExploits1References2
NVD
NVD
•added 2008/02/05 2:00 a.m.•28 views

CVE-2008-0567

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms comchronocontact 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 PPS/File.php, 2 Writer.php, and 3 PPS.php in excelwriter/; and 4...

7.5CVSS7.7AI score0.34307EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/05 12:00 a.m.•3 views

CVE-2008-0567: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms comchronocontact 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 PPS/File.php, 2 Writer.php, and 3 PPS.php in excelwriter/; and 4...

7.5CVSS6.3AI score0.34307EPSS
SaveExploits2References2
Rows per page
Query Builder