CVE-2019-10647: Unrestricted Upload of File with Dangerous Type

ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter because of a lack of inc/zzzfile.php restrictions. For example, source%5B%5D=http%3A%2F%2F192.168.0.1%2Ftest.php can be used if th...

Cross site request forgery (csrf)

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...

CVE-2018-18799

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...

PT-2018-14658

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for CSRF via the "user/controller.php?action=edit" endpoint, potentially enabling unauthorized modifications. Recommendations For School Event Management System version 1....

PT-2018-14657

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for Arbitrary File Upload. This can be achieved via the "event/controller.php?action=photos" endpoint, specifically by exploiting the action parameter set to photos...

CVE-2018-18794: Cross-Site Request Forgery (CSRF)

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...

CVE-2018-18799: Cross-Site Request Forgery (CSRF)

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...

CVE-2018-18793: Unrestricted Upload of File with Dangerous Type

School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos...

PT-2018-14662

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System version 1.0 Description The issue concerns a CSRF vulnerability. It affects the "event/controller.php" endpoint, specifically when the "action" parameter is set to "photos". Recommendations For School...

Directory traversal

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file...

PT-2018-14842

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows for arbitrary file deletion. This can be achieved by exploiting the statics/ueditor/php/controller.php "action=remove" key parameter, where an attacker can use directory traversal to delete...

stockex.co.tt XSS vulnerability

Open Bug Bounty ID: OBB-605007 Description| Value ---|--- Affected Website:| stockex.co.tt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Joomla! Zh YandexMap 6.2.1.0 SQL Injection

input name="id" value="-11 UNION ALL SELECT...

CVE-2018-6308: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the defaultcurrencyname parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate...

PT-2017-14603

Name of the Vulnerable Software and Affected Versions dayrui FineCms versions 5.2.0 before 2017.11.16 Description The issue concerns a Cross Site Scripting XSS problem. It is located in the core/M Controller.php file via the DR URI field. Recommendations For dayrui FineCms versions 5.2.0 before...

CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

CVE-2017-5487: Exposure of Sensitive Information to an Unauthorized Actor

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

CVE-2015-7816

The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...

CVE-2015-7816: Undefined Security Weakness

The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...

PT-2015-7626

Name of the Vulnerable Software and Affected Versions Piwik versions prior to 2.15.0 Description The issue allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header. This is due to a...