CVE-2018-11736

CVE-2018-11736 PHP RCE Exploit Pluck CMS Disclaimer ⚠️: This exploit was developed in Rust primarily as an introductory programming learning exercise. Please excuse any lack of technical rigor or non-idiomatic code patterns. Also, this is not my discovery; I relied on official reports to write thi...

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

CVE-2022-50972: Improper Control of Generation of Code

WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary PHP code by injecting shell commands through the product-type parameter. Attackers can send requests to the class-wc-meta-box-product-images.php endpoint with unsanitized product-type value...

EUVD-2016-2009

Malware in sbrugna...

CVE-2025-10251

A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

CVE-2025-10251: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

Code injection

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

PT-2023-12080 · Supermicro · Pcmt Supermicro-Cms

Name of the Vulnerable Software and Affected Versions: pcmt superMicro-CMS version 3.11 Description: An issue was discovered that allows attackers to delete files via a crafted image file in the images.php file. Recommendations: For pcmt superMicro-CMS version 3.11, consider restricting access to...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

superMicro CMS Security Vulnerability

superMicro CMS is a website builder by Patrick Taylor, an individual developer. A security vulnerability exists in superMicro CMS version 3.11, which originates from an arbitrary file deletion vulnerability in the file images.php. The vulnerability can be exploited by an attacker to delete...

CVE-2021-25856: Undefined Security Weakness

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

CVE-2021-25856

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...

WordPress Plugin Contest Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-4161: Improper Neutralization of Special Elements used in an SQL Command

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgcopystart POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensiti...

PT-2021-18029

Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "users/my images.php" URI. This enables attackers to execute malicious scripts on the client-side. Recommendations: For...

CVE-2016-11018: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

PT-2020-7949

Name of the Vulnerable Software and Affected Versions: Huge-IT gallery-images plugin versions prior to 1.9.0 Description: An issue was discovered in the Huge-IT gallery-images plugin, where the headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is...