EUVD-2017-11307

Malware in sbrugna...

EUVD-2017-11306

Malware in sbrugna...

EUVD-2020-26801

Malware in sbrugna...

EUVD-2017-2546

Malware in sbrugna...

CVE-2020-5640

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors...

Local File Inclusion vulnerability in OneThird CMS

Overview OneThird CMS provided SpiQe Software is a content management system CMS. OneThird CMS contains a Local File Inclusion vulnerability CWE-98. Impact Sensitive information may be obtained or arbitrary code may be executed by an unauthenticated remote attacker. Solution Update the Software...

CVE-2020-5640

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors...

Remote file inclusion

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors...

CVE-2020-5640

OneThird CMS Local File Inclusion (CVE-2020-5640) affects v1.96c and earlier. An unauthenticated remote attacker can cause arbitrary code execution or disclose sensitive data via unspecified vectors due to local file inclusion. Remediation: upgrade to v1.96d (as cited by multiple sources) or appl...

CVE-2017-10907

Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...

CVE-2017-10907

Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...

CVE-2017-10907

CVE-2017-10907 concerns a directory traversal in OneThird CMS Show Off prior to version 1.85. The JVN entries specify that an authenticated attacker with editing privileges can delete arbitrary files on the server, implying the vulnerability affects the Show Off component of OneThird CMS (Show Of...

OneThird CMS vulnerable to directory traversal

Overview OneThird CMS provided by SpiQe Software is a Contents Management System CMS. OneThird CMS contains a directory traversal vulnerability CWE-22. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#93333702: OneThird CMS vulnerable to directory traversal

OneThird CMS provided by SpiQe Software is a Contents Management System CMS. OneThird CMS contains a directory traversal vulnerability CWE-22. Impact An authenticated atacker with editing privileges may delete arbitrary files on the server. Solution Update the Software Update to the latest versio...

OneThird CMS Cross-Site Scripting Vulnerability (CNVD-2017-06227)

OneThird CMS is a lightweight content management system CMS for web application frameworks. A cross-site scripting vulnerability exists in the contact.php file in OneThird CMS 1.73 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2123

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php...

Cross site scripting

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...