CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

Sql injection

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

CVE-2020-20392

CVE-2020-20392 affects the imcat web app (v5.2). The vulnerability is a SQL injection via the fm[auser] parameter in coms/add_coms.php. Public sources describe the issue and its high/critical impact (CVSS v3.1: 9.8; v2: 7.5), but the connected documents do not provide concrete fixes, affected bui...

CVE-2020-20392

SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...

Imcat SQL注入漏洞

imcat intimate cat is a lightweight, free, shared general-purpose PHP web application. A SQL injection vulnerability exists in imcat version 5.2. An attacker can exploit this vulnerability by using the fmauser parameter in coms/addcoms.php to perform a SQL injection attack...

fm-misch.de Cross Site Scripting vulnerability OBB-1410758

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fm-trade.de Cross Site Scripting vulnerability OBB-1326887

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fm-construction.de Cross Site Scripting vulnerability OBB-1323125

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...

The vulnerability of the fly-fm file manager is related to an error in data processing through drag-and-drop, which allows a malicious actor to cause a service failure.

The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the fly-fm file manager arises due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to gain unauthorized access to confidential data.

The vulnerability of the fly-fm file manager exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential data...

The vulnerability of the fly-fm file manager lies in the fact that resources are not released after their useful period has ended. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...

The vulnerability of the fly-fm file manager, related to errors in saving permissions, allows a violator to gain access to confidential data.

The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

adv-fm-tableau.eservices.virginia.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149156 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting adv-fm-tableau.eservices.virginia.edu website and i...

1043.fm Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1065515 Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1043.fm website and its...

Cisco Data Center Network Manager getInterfacesBySwitch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2019-17536

Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...

Unrestricted file upload

Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs to use admin/mediaupload and fm/move...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4147-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4147-1 advisory. It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain Tunneled Direct Link Setup TDLS. A physically...

USN-4115-1: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this ...