Lucene search
+L

66 matches found

Cvelist
Cvelist
added 2023/03/29 6:00 a.m.37 views

CVE-2023-1685 HadSky Installation Interface index.php command injection

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has be...

6.5CVSS7.7AI score0.04079EPSS
SaveExploits1References4
CVE
CVE
added 2023/03/29 6:00 a.m.56 views

CVE-2023-1685

HadSky up to 7.11.8 contains a command injection vulnerability in the Installation Interface, specifically the /install/index.php file. The vulnerability allows remote exploitation and has been publicly disclosed. Affected software: HadSky versions up to 7.11.8. Root cause: unknown code in the In...

7.2CVSS7.1AI score0.04079EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/03/29 4:15 a.m.25 views

CVE-2023-1684

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

9.8CVSS6AI score0.00855EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/29 4:15 a.m.2 views

CVE-2023-1684

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

9.8CVSS5AI score0.00855EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/29 4:15 a.m.27 views

Design/Logic Flaw

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

5.8CVSS9.5AI score0.00855EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/29 4:00 a.m.37 views

CVE-2023-1684 HadSky unrestricted upload

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

5.8CVSS9.8AI score0.00855EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/29 4:00 a.m.68 views

CVE-2023-1684

HadSky 7.7.16 is affected by an unrestricted upload vulnerability in the file path upload/index.php?c=app&a=superadmin:index. The issue, exploitable remotely and publicly disclosed, is caused by a flaw in the upload handling that allows arbitrary files to be uploaded. Public sources in connected ...

9.8CVSS7.1AI score0.00855EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/03/29 12:00 a.m.10 views

HadSky 代码问题漏洞

HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky version 7.7.16, which stems from the presence of unrestricted uploads...

9.8CVSS5.8AI score0.00855EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/29 12:00 a.m.12 views

PT-2023-17167 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky version 7.7.16 Description: A vulnerability was found in HadSky, affecting an unknown part of the file "upload/index.php?c=app&a=superadmin:index". The manipulation leads to unrestricted upload. It is possible to initiate the attack...

9.8CVSS5.1AI score0.00855EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/03/29 12:00 a.m.11 views

PT-2023-17168 · Hadsky · Hadsky

Name of the Vulnerable Software and Affected Versions: HadSky versions up to 7.11.8 Description: A critical issue has been found, affecting the Installation Interface component, specifically the /install/index.php file. This issue leads to command injection and can be initiated remotely. The...

7.2CVSS6.9AI score0.04079EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/29 12:00 a.m.9 views

HadSky 命令注入漏洞

HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky versions prior to 7.11.8, which stems from unknown code in the /install/index.php file of the component Installation Interface, resulting in command injection...

7.2CVSS6.6AI score0.04079EPSS
SaveExploits1References5
CNVD
CNVD
added 2021/07/12 12:00 a.m.7 views

HadSky has an XSS vulnerability (CNVD-2021-55203)

HadSky is a PHP + MySQL based open source forum program. HadSky has an XSS vulnerability. Attackers can use this vulnerability to obtain sensitive information such as user cookies...

5.8AI score
SaveExploits0
CNVD
CNVD
added 2021/06/04 12:00 a.m.5 views

Command Execution Vulnerability in HadSky

HadSky is an original open source php light forum community blog program source code. A command execution vulnerability exists in HadSky. An attacker can exploit this vulnerability to gain control of the web server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/01/19 12:00 a.m.5 views

File Upload Vulnerability in HadSky Backend

HadSky is a PHP + MySQL based open source forum program. A file upload vulnerability exists in the backend of HadSky. An attacker can exploit this vulnerability to gain server privileges...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/11/18 12:00 a.m.7 views

HadSky Light Forum program has an override access vulnerability

HadSky Light Forum program is a personal original PHP system. A vulnerability exists in the HadSky Light Forum program that can be exploited by an attacker to gain unauthorized access to administrator information...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/11/18 12:00 a.m.9 views

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/10/20 12:00 a.m.4 views

Command Execution Vulnerability in HadSky Light Forums

HadSky Light Forum is an open source forum program based on PHP+MySQL. HadSky Light Forum has a command execution vulnerability. An attacker can exploit the vulnerability to obtain server privileges...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/06/02 12:00 a.m.1 views

File Upload Vulnerability in HadSky Backend

HadSky Light Forum is an open source forum program based on PHP+MySQL. HadSky backend has a file upload vulnerability , attackers can use the vulnerability to upload malicious files to obtain server privileges...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/12/10 12:00 a.m.6 views

HadSky has an XSS vulnerability

HadSky Light Forum is a newborn original PHP MySQL open source system , the main goal is to achieve light , fast , simple , full , 100% original open source system . HadSky XSS vulnerability , attackers can exploit the vulnerability to obtain administrator cookie information...

6.1AI score
SaveExploits0
CNVD
CNVD
added 2019/11/01 12:00 a.m.8 views

File Read Vulnerability in HadSky Light Forums

adSky Light Forum is a newborn original PHP MySQL open source system , the main goal is to achieve light , fast , simple , full , 100% original open source system , which now covers PC, mobile, IOS and Android APP and WeChat applet . HadSky Light Forum file reading vulnerability , attackers can u...

6.7AI score
SaveExploits0
Rows per page
Query Builder