Lucene search
+L

476 matches found

Mend
Mend
•added 2021/10/06 9:34 p.m.•9 views

CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

8.6CVSS0.01102EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2021/10/06 2:17 p.m.•501 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 复现 https://www.tenable.com/blog/cve-2021-41...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits179
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/06 12:00 a.m.•11 views

CVE-2020-21654: Undefined Security Weakness

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

7.2CVSS5.8AI score0.01102EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2021/09/26 1:02 a.m.•79 views

Exploit for CVE-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits12
CNVD
CNVD
•added 2021/09/14 12:00 a.m.•54 views

KiteCMS arbitrary file upload vulnerability

KiteCMS is a content management system based on think php. An arbitrary file upload vulnerability exists in /admin/upload/uploadfile in KiteCMS version 1.1. An attacker can exploit the vulnerability getshell via a specially crafted PHP file...

7.8CVSS4.2AI score0.00879EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/13 10:15 p.m.•37 views

CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

7.8CVSS0.00879EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/09/13 10:15 p.m.•22 views

CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

7.8CVSS6.9AI score0.00879EPSS
SaveExploits1References1
Prion
Prion
•added 2021/09/13 10:15 p.m.•30 views

Design/Logic Flaw

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

6.8CVSS7.5AI score0.00879EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/09/13 9:13 p.m.•51 views

CVE-2020-20672

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

7.6AI score0.00879EPSS
SaveExploits1References1
CVE
CVE
•added 2021/09/13 9:13 p.m.•63 views

CVE-2020-20672

KiteCMS v1.1 contains an arbitrary file upload vulnerability in /admin/upload/uploadfile that allows an attacker to getshell by uploading a crafted PHP file. Multiple sources (NVD/CVE, CNVD, Red Hat advisories, OSV, CVE lists) corroborate the flaw as an arbitrary file upload in KiteCMS with impac...

7.8CVSS7.5AI score0.00879EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/13 12:00 a.m.•9 views

CVE-2020-20672: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...

7.8CVSS5.9AI score0.00879EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/13 12:00 a.m.•26 views

KiteCMS code-related vulnerabilities

KiteCMS is a content management system based on think php. An arbitrary file upload vulnerability exists in /admin/upload/uploadfile in KiteCMS version 1.1. An attacker can exploit the vulnerability getshell via a specially crafted PHP file...

7.8CVSS5.8AI score0.00879EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/08/31 12:00 a.m.•60 views

Indexhibit misconfiguration vulnerability

Indexhibit is a web-based content management system. indexhibit version 2.1.5 contains a misconfiguration vulnerability. An attacker could use this vulnerability to modify the .php file so that it can get a getshell...

8.8CVSS3.5AI score0.00969EPSS
SaveExploits1References1
NVD
NVD
•added 2021/08/30 6:15 p.m.•35 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS0.00969EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/30 6:15 p.m.•30 views

Design/Logic Flaw

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

6.5CVSS8.4AI score0.00969EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/08/30 4:04 p.m.•37 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.5AI score0.00969EPSS
SaveExploits1References1
Mend
Mend
•added 2021/08/30 4:04 p.m.•8 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS0.00969EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/30 12:00 a.m.•11 views

CVE-2020-18121: Incorrect Permission Assignment for Critical Resource

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS5.8AI score0.00969EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/07/30 2:15 p.m.•17 views

CVE-2020-20698

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

7.2CVSS6.3AI score0.0195EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/30 2:15 p.m.•37 views

CVE-2020-20698

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

7.2CVSS0.0195EPSS
SaveExploits1References1
Rows per page
Query Builder