Design/Logic Flaw

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

CVE-2022-30453

ShopWind

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30452

ShopWind

PT-2022-20119

Name of the Vulnerable Software and Affected Versions ShopWind versions prior to 3.4.3 Description The issue is related to a Sql injection vulnerability in the Database.php file. Recommendations For versions prior to 3.4.3, update to version 3.4.3 or later to resolve the issue...

PT-2022-20120

Name of the Vulnerable Software and Affected Versions ShopWind versions 3.4.2 and earlier Description The issue is related to a Remote Code Execution RCE vulnerability found in the Database.php file. Recommendations For versions 3.4.2 and earlier, update to a version later than 3.4.2 to resolve t...

ShopWind 安全漏洞

ShopWind is a B2B2C, O2O industry e-commerce system software based on the Yii2.0 framework deeply reconstructed by China ShopWind. You can easily create and publish your own brand of professional e-commerce platform for a full range of branding and product promotion. A security vulnerability exis...

CVE-2022-30452: Improper Neutralization of Special Elements used in an SQL Command

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-30453: Undefined Security Weakness

ShopWind = 3.4.2 has a RCE vulnerability in Database.php...

baijiacms path traversal vulnerability

baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...

Directory traversal

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter...

CVE-2020-25873: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter...

PT-2021-11194

Name of the Vulnerable Software and Affected Versions: Baijiacms V4 Description: A directory traversal issue was found in the system/manager/class/web/database.php component, allowing attackers to delete folders on the server using the id parameter. Recommendations: For Baijiacms V4, consider...

baijiacms 路径遍历漏洞

baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...

Updated phppgadmin package fixes a security vulnerability

phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, database.php does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit...

CVE-2020-35131

Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI...

CVE-2020-35131: Improper Control of Generation of Code

Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI...

ThinkAdmin 6 - Arbitrarily File Read

Exploit Title: ThinkAdmin 6 - Arbitrarily File Read Google Dork: N/A Date: 2020-09-14 Exploit Author: Hzllaga Vendor Homepage: https://github.com/zoujingli/ThinkAdmin/ Software Link: Before https://github.com/zoujingli/ThinkAdmin/commit/ff2ab47cfabd4784effbf72a2a386c5d25c43a9a Version: v6 =...

ThinkAdmin 6 Arbitrary File Read

Exploit Title: ThinkAdmin 6 - Arbitrarily File Read Google Dork: N/A Date: 2020-09-14 Exploit Author: Hzllaga Vendor Homepage: https://github.com/zoujingli/ThinkAdmin/ Software Link: Before https://github.com/zoujingli/ThinkAdmin/commit/ff2ab47cfabd4784effbf72a2a386c5d25c43a9a Version: v6 =...

PT-2020-12624

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.124 Description The issue allows administrators to choose arbitrary files for ingestion by MISP, leading to potential leaks of specific string patterns. These leaks can include passwords from database.php or GPG key...