Young Entrepreneur E-Negosyo System 代码问题漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...

SUSE CVE-2008-6592

thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" aka flat and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cachedir parameter containing a %00 encoded null by...

PT-2023-16117 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue affects an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input...

PT-2022-27923 · Trendnet · Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the del num parameter in the icp delete img sub 41DEDC function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restricting...

WordPress plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. The WordPress plugin suffers from a cross-site...

Laundry Booking Management System Remote Code Execution Vulnerability

Laundry Booking Management System is a PHP project called Laundry Booking Management System. A remote code execution vulnerability exists in Laundry Booking Management System, which stems from a failure to properly validate input data in profile.php, and can be exploited by attackers to execute...

CVE-2021-45003

Laundry Booking Management System 1.0 Latest and previous versions are affected by a remote code execution RCE vulnerability in profile.php through the "image" parameter that can execute a webshell payload...

CVE-2021-45003

Laundry Booking Management System 1.0 Latest and previous versions are affected by a remote code execution RCE vulnerability in profile.php through the "image" parameter that can execute a webshell payload...

CVE-2021-45003

Laundry Booking Management System 1.0 Latest and previous versions are affected by a remote code execution RCE vulnerability in profile.php through the "image" parameter that can execute a webshell payload...

Remote code execution

Laundry Booking Management System 1.0 Latest and previous versions are affected by a remote code execution RCE vulnerability in profile.php through the "image" parameter that can execute a webshell payload...

PT-2022-12285 · Unknown · Laundry Booking Management System

Name of the Vulnerable Software and Affected Versions: Laundry Booking Management System versions 1.0 and earlier Description: The issue is related to a remote code execution RCE vulnerability. It affects the profile.php file through the image parameter, allowing the execution of a webshell...

Laundry Booking Management System 安全漏洞

Laundry Booking Management System is a PHP project called Laundry Booking Management System. A remote code execution vulnerability exists in Laundry Booking Management System, which stems from a failure to properly validate input data in profile.php, and can be exploited by attackers to execute...

CVE-2021-34129

LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter...

PT-2021-15380 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.1.0 through 3.9.23 Description: The issue is related to the lack of escaping of image-related parameters in multiple com tags views, which can lead to XSS attack vectors. Recommendations: For Joomla! versions 3.1.0 through...

CVE-2019-14251

An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage downloadDocServer to traverse the file system and access files or directories that are...

Cross site scripting

Cross-site scripting XSS vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action...

CVE-2016-10758

PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the imagename parameter...

PHPSUGAR PHP Melody SQL Injection Vulnerability (CNVD-2017-32539)

PHPSUGAR PHP Melody is a PHP-based content management system for video websites. A SQL injection vulnerability exists in PHPSUGAR PHP Melody versions prior to 2.7.3. A remote attacker can exploit this vulnerability by sending the 'image' parameter to the admin/editcategory.php file to inject SQL...

CVE-2017-15578

In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/editcategory.php...

CVE-2017-9555

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter...