PT-2020-16274

Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A SQL injection issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...

CVE-2020-20800: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

CVE-2020-26043: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...

CVE-2020-26042: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...

CVE-2020-26041: Undefined Security Weakness

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...

PT-2020-15286

Name of the Vulnerable Software and Affected Versions MetInfo version 7.0.0 beta Description An issue was discovered that allows SQL Injection via the "install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes" URI. Recommendations For MetInfo version 7.0.0 beta, at the moment, there...

PT-2020-16275

Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A cross-site scripting XSS issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...

PT-2020-6081

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.4.10 and earlier Description A stored cross-site scripting XSS vulnerability was discovered in BigTree CMS, which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12281

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

PT-2020-13286

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows remote attackers to upload sound files via the "/index.php" API endpoint, potentially leading to unauthorized access or data modification. Recommendations For ismartgate PRO version...

CVE-2020-12282: Cross-Site Request Forgery (CSRF)

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12281: Cross-Site Request Forgery (CSRF)

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

CVE-2020-12840: Cross-Site Request Forgery (CSRF)

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-12841: Cross-Site Request Forgery (CSRF)

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php...

PT-2020-13287

Name of the Vulnerable Software and Affected Versions ismartgate PRO version 1.5.9 Description The issue allows remote attackers to upload image files via the "/index.php" API endpoint, potentially leading to unauthorized access or data modification. Recommendations For ismartgate PRO version...

PT-2020-13093

Name of the Vulnerable Software and Affected Versions iSmartgate PRO version 1.5.9 Description The issue concerns a CSRF vulnerability that can be exploited via the busca parameter in the form used for searching for users, accessible through the "/index.php" API endpoint. This vulnerability can b...

PT-2020-13092

Name of the Vulnerable Software and Affected Versions iSmartgate PRO version 1.5.9 Description The issue allows remote attackers to create a new user via the "/index.php" API endpoint. This is achieved through a CSRF attack. Recommendations For iSmartgate PRO version 1.5.9, consider implementing...

CVE-2020-8887: Improper Neutralization of Special Elements used in an SQL Command

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

CVE-2020-25515: Unrestricted Upload of File with Dangerous Type

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:// /lms/index.php?page=books...