21 matches found
EUVD-2022-48393
Malicious code in bioql PyPI...
EUVD-2022-48392
Malicious code in bioql PyPI...
CVE-2022-45527
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
CVE-2022-45526
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
CVE-2022-45526
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
CVE-2022-45526
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
CVE-2022-45527
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
CVE-2022-45527
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
Unrestricted file upload
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
Sql injection
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
CVE-2022-45526: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
CVE-2022-45526
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
PT-2023-14689
Name of the Vulnerable Software and Affected Versions Future-Depth Institutional Management Website IMS version 1.0 Description The issue allows attackers to execute arbitrary commands via the ad parameter to "/admin area/login transfer.php" API endpoint. This enables attackers to potentially...
CVE-2022-45527: Unrestricted Upload of File with Dangerous Type
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
CVE-2022-45526
CVE-2022-45526 affects Future-Depth Institutional Management Website (IMS) 1.0. The vulnerability is a SQL injection in /admin_area/login_transfer.php via the ad parameter, enabling arbitrary commands. CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, no privilege...
CVE-2022-45527
CVE-2022-45527 affects Future-Depth Institutional Management Website (IMS) 1.0. The vulnerability is an unauthenticated file upload flaw that allows direct uploads to the courseimg directory, enabling attackers to place malicious files. CVSSv3.1 metrics indicate a critical impact (CVSS:3.1/AV:N/A...
CVE-2022-45527
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
CVE-2022-45527
File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...
Future-Depth Institutional Management Website 代码问题漏洞
Future-Depth Institutional Management Website is a user-friendly institutional website from the individual developers at Future-Depth that offers various types of courses for students. A security vulnerability exists in Future-Depth Institutional Management Website IMS version 1.0. An attacker...