Design/Logic Flaw

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

CVE-2019-9829

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

CVE-2019-9761: Improper Restriction of XML External Entity Reference

An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechatgetxml in include/plugin/payment/wechat/notifyurl.php...

PT-2019-19852

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A security issue was discovered, allowing unauthorized access to read any file in the system or scan the internal network without authentication. This is due to a call to wechat getxml in the...

PT-2019-19853

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A SQL Injection issue was found in the include/plugin/payment/alipay/pay.php file, specifically with the id parameter. This issue does not require any authentication to be exploited. Recommendations For PHPSHE...

Ultimate Membership Pro 7.4.2 <= 7.5 - Arbitrary media include

In addition to cropping/rotating/resizing an image of your choosing, you can abuse the imgUrl feature on versions that it's available on 7.4.2+ at least to make an HTTP request to any site you want. For example, by having it connect to a site you control, you can determine the IP address of the...

Ultimate Membership Pro 7.4.2 <= 7.5 - Arbitrary media include

In addition to cropping/rotating/resizing an image of your choosing, you can abuse the imgUrl feature on versions that it's available on 7.4.2+ at least to make an HTTP request to any site you want. For example, by having it connect to a site you control, you can determine the IP address of the...

CVE-2019-7678

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

PT-2019-18701

Name of the Vulnerable Software and Affected Versions Enphase Envoy versions R3.. Description A directory traversal issue was found, which can be exploited via specific directories such as "images/", "include/", "include/js", or "include/css" on TCP port 8888. Recommendations For Enphase Envoy...

CVE-2019-7678: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

CVE-2019-7402

An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...

CVE-2019-7402: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2018:2172-1)

This update for cups fixes the following issues: The following security vulnerabilities were fixed : - Fixed a local privilege escalation to root and sandbox bypasses in the scheduler - CVE-2018-4180: Fixed a local privilege escalation to root in dnssd backend bsc1096405 - CVE-2018-4181: Limited...

h-include (1.0.0), hinclude (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2018-16478 via simplehttpserver (>=0.0.6, <=0.2.1)

simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-16478 Source advisory: OSV:GHSA-VWR2-WJ63-86GR...

PHP-Proxy Weak Encryption Vulnerability

PHP-Proxy is a web-based proxy script featuring fast, easy customization and the ability to provide support for complex websites such as YouTube and Facebook. A weak encryption vulnerability in the strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy versions 5.1.0 and...

PT-2018-15120

Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue in Metinfo allows setting arbitrary HTTP headers, including the Cookie header, through include/interface/applogin.php. Additionally, common.inc.php permits registering variables from the $ COOKIE...

Sql injection

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

PT-2018-14933

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.64 Description The issue is related to SQL injection due to mishandling in the include/mkhtml.func.php file. This occurs via the topic parameter in the admin makehtml.php file. Recommendations For SeaCMS version 6.64, consider...

CVE-2018-19349: Improper Neutralization of Special Elements used in an SQL Command

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...