74 matches found
CVE-2019-16192
uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...
CVE-2019-16192
uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...
PT-2019-14569
Name of the Vulnerable Software and Affected Versions DocCms version 2016.5.17 Description The issue allows remote attackers to execute arbitrary PHP code through module management files. This can be achieved by uploading a .php file in a ZIP archive, exploiting the upload model function in the...
CVE-2019-16192: Unrestricted Upload of File with Dangerous Type
uploadmodel in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive...
[SECURITY] Fedora 30 Update: drupal7-views-3.23-1.fc30
You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...
No-Cms 1.0 - order_by SQL Injection
No-Cms 1.0 - orderby SQL Injection Exploit Title: No-Cms 1.0 - 'orderby' SQL Injection Date: 2018-11-28 Exploit Author: Loading Kura Kura Vendor Homepage: https://github.com/goFrendiAsgard/No-CMS Software Link: https://codeload.github.com/goFrendiAsgard/No-CMS/zip/master Tested on: Win10/Kali Lin...
No-Cms 1.0 SQL Injection
Exploit Title: No-Cms 1.0 - 'orderby' SQL Injection Date: 2018-11-28 Exploit Author: Loading Kura Kura Vendor Homepage: https://github.com/goFrendiAsgard/No-CMS Software Link: https://codeload.github.com/goFrendiAsgard/No-CMS/zip/master Tested on: Win10/Kali Linux Google Dork: n/a Version: n/a CV...
Huawei Tecal E9000 Chassis Hyper Module Management Elevation of Privilege Vulnerability
Tecal E9000 Chassis is a blade server from Huawei, China.Hyper Module Management HMM is one of the redundancy management module software. A security vulnerability exists in the HMM software in Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions. An attacker could exploit the...
Huawei Tecal E9000 Chassis Hyper Module Management Permission License Access Control Vulnerability
Huawei Tecal E9000 Chassis is a blade server from Huawei, China.Hyper Module Management HMM is one of the redundancy management module software. A security vulnerability exists in the HMM software in Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions. An attacker can exploit the...
CVE-2014-9695: Undefined Security Weakness
The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...
PT-2017-6388
Name of the Vulnerable Software and Affected Versions Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier Description The issue allows a non-super-domain user who accesses the Hyper Module Management HMM software through SNMPv3 to perform operations on a server as a super-domain use...
PT-2017-6389
Name of the Vulnerable Software and Affected Versions Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier Description The issue allows an operator to modify the user configuration of iMana through privilege escalation in the Hyper Module Management HMM software. Recommendations For...
Fedora Update for drupal7-context FEDORA-2013-20976
Check for the Version of drupal7-context OpenVAS Vulnerability Test Fedora Update for drupal7-context FEDORA-2013-20976 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
phpcms_v9. 3. 2 a management module logic validation vulnerability-vulnerability warning-the black bar safety net
In the file\modules\sms\sms. php: class sms extends admin function construct $this-logdb = pcbase::loadmodel'smsreportmodel'; $this-moduledb = pcbase::loadmodel'modulemodel'; $this-memberdb = pcbase::loadmodel'membermodel'; //Get the SMS platform configuration information $siteid = getsiteid;...