Lucene search
K

933 matches found

CNNVD
CNNVD
added 2023/07/17 12:0 a.m.3 views

MyCompanyFiles Oliva Expertise EKS 跨站脚本漏洞

MyCompanyFiles Oliva Expertise EKS is a file management application from MyCompanyFiles, Inc. A cross-site scripting vulnerability exists in MyCompanyFiles Oliva Expertise EKS versions prior to 1.2 that stems from vulnerability to cross-site scripting XSS attacks...

6.1CVSS5.8AI score0.00312EPSS
Exploits0References2
Kitploit
Kitploit
added 2023/06/28 2:12 a.m.52 views

HardHatC2 - A C# Command And Control Framework

A cross-platform, collaborative, Command & Control framework written in C, designed for red teaming and ease of use. HardHat is a multiplayer C .NET-based command and control framework. Designed to aid in red team engagements and penetration testing. HardHat aims to improve the quality of life...

8.3AI score
Exploits0References4
CVE
CVE
added 2023/06/22 12:0 a.m.41 views

CVE-2023-27083

Pluck CMS 4.7.15–4.7.16-dev5 has a remote code execution vulnerability in /admin.php via the manage file functionality. The root cause is likely improper handling of file management in admin.php, enabling arbitrary code execution by an attacker who can access this feature. Documents consistently ...

7.2CVSS7.2AI score0.0121EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/03/27 5:15 p.m.1 views

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

6.1CVSS6.5AI score0.00429EPSS
Exploits1References1
NVD
NVD
added 2023/03/27 5:15 p.m.10 views

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

6.1CVSS5.9AI score0.00429EPSS
Exploits1References1
Prion
Prion
added 2023/03/27 5:15 p.m.10 views

Cross site scripting

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

5.8CVSS5.9AI score0.00429EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/27 12:0 a.m.4 views

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

5.9AI score0.00429EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/03/27 12:0 a.m.11 views

CVE-2023-27245

A cross-site scripting XSS vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module...

6AI score0.00429EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/03/27 12:0 a.m.2 views

File Management Project 跨站脚本漏洞

FileOrbis File Management System is a file server management product from FileOrbis. A security vulnerability exists in File Management Project version 1.0.0. An attacker can exploit this vulnerability by injecting a specially crafted payload to execute arbitrary web script or HTML...

6.1CVSS6.7AI score0.00429EPSS
Exploits1References2
CVE
CVE
added 2023/03/27 12:0 a.m.47 views

CVE-2023-27245

The CVE-2023-27245 entry refers to a cross-site scripting (XSS) vulnerability in File Management Project 1.0.0. The flaw occurs in the Edit User module where a crafted payload injected into the Name field can cause arbitrary web scripts/HTML to execute in a victim’s browser. All connected sources...

6.1CVSS5.8AI score0.00429EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.3 views

PT-2023-21027 · Unknown · File Management Project

Name of the Vulnerable Software and Affected Versions: File Management Project version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Edit User module. Recommendations: For...

6.1CVSS6AI score0.00429EPSS
Exploits1References4
OSV
OSV
added 2023/03/09 10:15 p.m.4 views

CVE-2023-1303

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS5.5AI score0.00792EPSS
Exploits0References3
NVD
NVD
added 2023/03/09 10:15 p.m.11 views

CVE-2023-1303

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS7.1AI score0.00792EPSS
Exploits0References3
Prion
Prion
added 2023/03/09 10:15 p.m.15 views

Design/Logic Flaw

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS9.4AI score0.00792EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/03/09 9:48 p.m.18 views

CVE-2023-1303 UCMS System File Management Module fileedit.php unrestricted upload

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS9.8AI score0.00792EPSS
Exploits0References3
CVE
CVE
added 2023/03/09 9:48 p.m.51 views

CVE-2023-1303

CVE-2023-1303 affects UCMS 1.6, specifically the System File Management Module and the sadmin/fileedit.php file. The root cause is manipulation of the file argument in that module, leading to an unrestricted upload. The issue can be exploited remotely according to multiple sources, with varying C...

9.8CVSS8AI score0.00792EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/03/09 12:0 a.m.7 views

UCMS 代码问题漏洞

UCMS is a content management system written in PHP. A code issue vulnerability exists in UCMS version 1.6, which stems from an unknown security issue in the file sadmin/fileedit.php in the component System File Management Module, which could lead to unrestricted uploads via the parameter id...

9.8CVSS6.9AI score0.00792EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/03/09 12:0 a.m.5 views

PT-2023-16875 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: A critical issue affects the System File Management Module, specifically the file sadmin/fileedit.php, allowing for unrestricted upload due to the manipulation of the file argument. This can be initiated remotely...

9.8CVSS6.5AI score0.00792EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/02/02 12:0 a.m.8 views

CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

6.3AI score0.004EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/01/13 1:20 p.m.6 views

CVE-2022-3693

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS7.1AI score0.00697EPSS
Exploits0References3
Rows per page
Query Builder