CVE-2026-7389

EyouCMS (up to 1.7.9) is affected by a SQL injection in GetSortData (application/common.php) caused by manipulating the sort_asc argument. The vulnerability can be triggered remotely and its exploit has been publicly disclosed; the project owner was informed via issue reports but has not responde...

CVE-2026-7389 EyouCMS common.php GetSortData sql injection

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sortasc leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly an...

CVE-2026-7389: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sortasc leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly an...

CVE-2026-34607: Improper Limitation of a Pathname to a Restricted Directory

Emlog is an open source website building system. In versions 2.6.2 and prior, a path traversal vulnerability exists in the emUnZip function include/lib/common.php:793. When extracting ZIP archives plugin/template uploads, backup imports, the function calls $zip-extractTo$path without sanitizing Z...

EUVD-2007-2091

Malware in sbrugna...

EUVD-2011-1946

Malware in sbrugna...

EUVD-2007-3346

Malware in sbrugna...

EUVD-2023-12921

Malicious code in bioql PyPI...

CVE-2025-11138: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

Wenkucms operating system command injection vulnerability

wenkucms is a content management system by mirweiye personal developer. An OS command injection vulnerability exists in wenkucms 3.4 and earlier versions, which originates from a misuse of the function createPathOne in the file app/common/common.php, which could lead to a remote command injection...

CVE-2025-50722

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...

SparkShop security vulnerabilities

SparkShop is a mall system in China SparkShop open source. A security vulnerability exists in SparkShop version 1.1.7, which stems from improperly set permissions on the Common.php component and could lead to arbitrary code execution...

CVE-2025-50722

The open-source mall system sparkshop version 1.1.7 is impacted by an Insecure Permissions vulnerability in the Common.php component. This flaw allows a remote attacker to perform arbitrary code execution . While the technical details specify improper neutralization of special elements used in a ...

CVE-2025-50722: Improper Neutralization of Special Elements used in a Command

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component...

CVE-2011-10013: Improper Control of Generation of Code

Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php...

CVE-2024-12845

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2025-22973: Exposure of Sensitive Information to an Unauthorized Actor

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...

Qibosoft QiboCMS security vulnerabilities

Qibosoft QiboCMS is an application software from China Qibosoft Qibosoft company. A website builder CMS. A security vulnerability exists in Qibosoft QiboCMS version X1.0, which originates from the ability to retrieve sensitive information by directly retrieving the URL request response content vi...

CVE-2024-0648

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-12845 Emlog Pro common.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has...