3274 matches found
TerraMaster FS-210 Elevation of Privilege Vulnerability
TerraMaster FS-210 is a NAS Network Attached Storage device from TerraMaster, a Shenzhen, China based company. An elevation of privilege vulnerability exists in TerraMaster FS-210 version 4.0.19, which can be exploited to elevate privileges with the help of the 1.user.php file...
SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ad***_ne***.php file re*** method in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file re method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in seacms backend ad***_ma***.php file
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adma.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ad***_to***.php file en*** parameter in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file en parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL Injection Vulnerability in LJCMS us***.php File
LJCMS is a free and open source content management system. A SQL injection vulnerability exists in the LJCMS us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
Tooonyy dormsystem SQL Injection Vulnerability
Tooonyy dormsystem is a dormitory information management system. A SQL injection vulnerability exists in the admin.php file in versions 1.3 and earlier of Tooonyy dormsystem, which stems from a lack of validation of externally-entered SQL statements in database-based applications and can be...
WordPress Arforms Plugin Input Validation Error Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ARforms is a responsive form builder plugin used in it. An input validation error vulnerability exists in the 'arfdeletefile' function ...
Arbitrary File Deletion Vulnerability in RGCMS Fi***.php File
RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS Fi.php file exists in any file deletion vulnerability, an attacker can use this vulnerability to...
Vanno enterprise website management system backend file contains a vulnerability
Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system background file contains a vulnerability that can be exploited by attackers to obtain administrator privileges...
PT-2019-6426 · Ruijie · Ruijie Eg-2000Se
Name of the Vulnerable Software and Affected Versions: Ruijie EG-2000SE versions 11.9 B11P1 Description: The issue is related to the upload.php script in the Ruijie EG-2000SE gateway, specifically with the UploadFile class. It allows for unrestricted file upload of dangerous file types. An attack...
SQL injection vulnerability in pr***_sh***.php file of website building system of Suzhou Ernst Network Technology Co.
Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the prsh.php file of the website building system of Suzhou Ernst Network Technolog...
SQL Injection Vulnerability in ***ut.php at Suzhou Ernst Network Technology Co.
Suzhou Ernst Network Technology Co., Ltd. specializes in marketing planning, the company provides beautiful website design, graphic design, program development. Suzhou Ernst Network Technology Co., Ltdut.php has a SQL injection vulnerability that can be exploited by attackers to obtain database...
WordPress Ocean Extra plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4475594) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Jet Database Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...
Code injection
In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code...
S-CMS hospital website building system background aj***.php N_sh parameter has SQL injection vulnerability
S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background aj.php Nsh parameter SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
Command Execution Vulnerability in CMS Co***.php File
Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. A command execution...
