145 matches found
CVE-2024-45894: Files or Directories Accessible to External Parties
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
CVE-2024-45894
BlueCMS version 1.6 is vulnerable to Arbitrary File Deletion due to an insecure handling of the file_name parameter in the /admin/database.php?act=del request. This flaw allows an attacker to delete files on the server arbitrarily. As a temporary workaround, it is recommended to restrict access t...
CVE-2024-45894
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
Ciuis CRM 1.0.7 Local File Inclusion
==================================================================================================================================== | Title : Ciuis™ CRM v1.0.7 LFI Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit | | Vendor :...
CVE-2023-1184 ECshop Backup Database database.php unrestricted upload
A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upload. The attack may be launched...
CVE-2023-1184: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upload. The attack may be launched...
CVE-2015-10045
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
Sql injection
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2015-10045
CVE-2015-10045 affects the tutrantta project_todolist, specifically the library/Database.php function getAffectedRows/where/insert/update. The issue is a SQL injection vulnerability reported as critical. A patch named 194a0411bbe11aa4813f13c66b9e8ea403539141 is recommended to fix the issue. Publi...
CVE-2015-10045
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2015-10045 tutrantta project_todolist Database.php update sql injection
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2015-10045 tutrantta project_todolist Database.php update sql injection
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2015-10045: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...
CVE-2022-30453
ShopWind = 3.4.2 has a RCE vulnerability in Database.php...
CVE-2022-30452
ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...
CVE-2022-30452
ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...
CVE-2022-30453
ShopWind = 3.4.2 has a RCE vulnerability in Database.php...
CVE-2022-30452
ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...