476 matches found
CVE-2024-48700
The Kliqqi-CMS content management system contains a background arbitrary code execution vulnerability. Attackers can exploit the edit_page.php component to implant backdoors or gain shell access . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the impa...
New Hacker Group 'GambleForce' Tageting APAC Firms Using SQL Injection Attacks
A previously unknown hacker outfit called GambleForce has been attributed to a series of SQL injection attacks against companies primarily in the Asia-Pacific APAC region since at least September 2023. "GambleForce uses a set of basic yet very effective techniques, including SQL injections and th...
CVE-2023-48965
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...
CVE-2023-48965
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...
CVE-2023-48965
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...
PT-2023-31019
Name of the Vulnerable Software and Affected Versions ThinkAdmin version 6.1.53 Description An issue in the component /admin/api.plugs/script allows attackers to getshell via providing a crafted URL to download a malicious PHP file. Recommendations For ThinkAdmin version 6.1.53, as a temporary...
CVE-2023-48965: Unrestricted Upload of File with Dangerous Type
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...
Exploit for Path Traversal in Fit2Cloud Jumpserver
CVE-2023-42819 CVE-2023-42819 Description of the Vulne...
CVE-2022-46020
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
Design/Logic Flaw
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
CVE-2022-46020: Unrestricted Upload of File with Dangerous Type
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
WBCE CMS code-related vulnerabilities
WBCE CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in WBCE CMS v1.5.4, which originates from a getshell that can be realized by modifying the upload file type...
CVE-2022-46020
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
CVE-2022-46020
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...
CVE-2022-46020
WBCE CMS v1.5.4 is affected by CVE-2022-46020, a remote code execution vulnerability caused by allowing getshell via modification of the upload file type. The NVD/Nuclei and related sources describe a critical flaw (CVSS v3.1: 9.8) with network attack vector, no privileges required, and high impa...
GHSA-59FH-RJQ3-XQ7J Thinkphp has a code logic error
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell...
CVE-2022-44289
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell...
CVE-2022-44289
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell...