Lucene search
+L

100 matches found

Cvelist
Cvelist
•added 2024/06/12 1:47 p.m.•43 views

CVE-2024-1576 SQL Injection in MegaBIP

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09...

9.3CVSS0.00571EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/06/12 1:47 p.m.•17 views

CVE-2024-1576 SQL Injection in MegaBIP

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09...

9.3CVSS5.7AI score0.00571EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•21 views

PT-2024-18206 · Megabip · Megabip

Name of the Vulnerable Software and Affected Versions: MegaBIP software versions through 5.10 Description: The issue allows an attacker to upload any file to the server, including a PHP code file, without authentication. This enables potential execution of malicious code on the server...

9.8CVSS6.1AI score0.00689EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•10 views

CVE-2024-1577: Improper Control of Generation of Code

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...

9.8CVSS6.8AI score0.01126EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•24 views

MegaBIP Security Vulnerabilities

MegaBIP is a software used to create BIP websites. A security vulnerability exists in MegaBIP that stems from the presence of a remote code execution vulnerability that allows an attacker to execute arbitrary code on the server without authentication by placing the attacker on the server...

9.8CVSS7.2AI score0.01126EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•9 views

CVE-2024-1659: Unrestricted Upload of File with Dangerous Type

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server including a PHP code file without an authentication. This issue affects MegaBIP software versions through 5.10...

9.8CVSS5.8AI score0.00689EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•2 views

CVE-2024-1576: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09...

9.8CVSS5.7AI score0.00571EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•19 views

MegaBIP Security Vulnerabilities

MegaBIP is a software used to create BIP websites. A security vulnerability exists in MegaBIP 5.09 and earlier versions that stems from the presence of a SQL injection vulnerability that allows an attacker to gain site administrator privileges, including access to the administration panel and the...

9.8CVSS5.7AI score0.00571EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•21 views

MegaBIP Security Vulnerabilities

MegaBIP is a software for creating BIP websites. A security vulnerability exists in MegaBIP 5.10 and earlier versions, which stems from an arbitrary file upload vulnerability that allows an attacker to upload any file to the server without authentication...

9.8CVSS6AI score0.00689EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•8 views

PT-2024-18144 · Megabip · Megabip

Name of the Vulnerable Software and Affected Versions: MegaBIP software versions through 5.09 MegaBIP software all versions Description: The issue allows an attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator...

9.8CVSS6.5AI score0.00571EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•13 views

PT-2024-18145

Name of the Vulnerable Software and Affected Versions MegaBIP software versions through 5.11.2 Description The issue allows for Remote Code Execution on the server without requiring authentication. This is achieved by saving crafted PHP code to one of the website files. Recommendations For versio...

9.8CVSS6.3AI score0.01126EPSS
SaveExploits0References9
NVD
NVD
•added 2024/01/29 12:15 p.m.•41 views

CVE-2023-5378

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

8.8CVSS8.6AI score0.00527EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/01/29 12:15 p.m.•20 views

CVE-2023-5378

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

5.4CVSS5.7AI score0.00527EPSS
SaveExploits0References4
Prion
Prion
•added 2024/01/29 12:15 p.m.•33 views

Input validation

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

4.9CVSS5.4AI score0.00527EPSS
SaveExploits0References4Affected Software2
CVE
CVE
•added 2024/01/29 11:11 a.m.•93 views

CVE-2023-5378

CVE-2023-5378 affects MegaBIP up to version 4.36.2 and all versions of SmodBIP ( MegaBIP 5.08 is not vulnerable ). The vulnerability is an improper input validation that enables stored XSS. Affected components: MegaBIP (input handling that leads to stored XSS) and SmodBIP (all versions). Exploita...

8.8CVSS5.9AI score0.00527EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
•added 2024/01/29 11:11 a.m.•49 views

CVE-2023-5378 Stored XSS in SmodBIP and MegaBIP

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

8.8CVSS8.7AI score0.00527EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/01/29 11:11 a.m.•15 views

CVE-2023-5378 Stored XSS in SmodBIP and MegaBIP

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

8.8CVSS6.9AI score0.00527EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/01/29 12:00 a.m.•18 views

MegaBIP Cross-Site Scripting Vulnerability

MegaBIP is a software for creating BIP websites. A cross-site scripting vulnerability exists in MegaBIP version 4.36.2 and prior versions that stems from incorrect input validation...

8.8CVSS6.2AI score0.00527EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•20 views

PT-2024-14791 · Smodbip +1 · Smodbip +1

Name of the Vulnerable Software and Affected Versions: MegaBIP versions up to 4.36.2 SmodBIP all versions Description: The issue is related to an Improper Input Validation vulnerability that allows for Stored XSS. This vulnerability affects MegaBIP in versions up to 4.36.2 and SmodBIP in all...

8.8CVSS6.9AI score0.00527EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•11 views

CVE-2023-5378: Improper Neutralization of Input During Web Page Generation

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown...

8.8CVSS5.5AI score0.00527EPSS
SaveExploits0References3
Rows per page
Query Builder