161 matches found
CVE-2020-26041: Undefined Security Weakness
An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...
CVE-2020-26042: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...
CVE-2020-26043: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...
PT-2020-16275
Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A cross-site scripting XSS issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...
PT-2020-16273
Name of the Vulnerable Software and Affected Versions Hoosk CmS version 1.8.0 Description An issue was discovered in Hoosk CmS, which allows for Remote Code Execution. The vulnerability is located in the install/index.php file. Recommendations For Hoosk CmS version 1.8.0, consider removing or...
PT-2020-16274
Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A SQL injection issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...
CVE-2020-20800: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...
PT-2020-15286
Name of the Vulnerable Software and Affected Versions MetInfo version 7.0.0 beta Description An issue was discovered that allows SQL Injection via the "install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes" URI. Recommendations For MetInfo version 7.0.0 beta, at the moment, there...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2012-1495
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
CVE-2012-1495: Improper Neutralization of Special Elements in Output Used by a Downstream Component
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...
PT-2020-7186
Name of the Vulnerable Software and Affected Versions WebCalendar versions prior to 1.2.5 Description The issue allows remote attackers to execute arbitrary code via the form single user login parameter in the install/index.php file. Recommendations For versions prior to 1.2.5, update to version...
CVE-2019-17611
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
CVE-2019-17610
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...
CVE-2019-17607
HongCMS 3.0.0 has XSS via the install/index.php servername parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php servername parameter...