4069 matches found
PT-2018-15463
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by entering the code during an index.php sadmin fileedit action. Recommendations For UCMS version 1.4.7, consider restricting...
CVE-2018-20129: DedeCMS V5. 7 SP2 front Desk file upload getshell vulnerability alerts-a vulnerability alert-the black bar safety net
2018-12-11 in CVE Chinese application station published a DEDECMS 5.7 SP2 is the latest version there is a file upload vulnerability, with administrator privileges can exploit this vulnerability to upload and getshell execute arbitrary PHP code. After analysis and verification. The vulnerability...
PT-2018-15277
Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 2.0.7 Description The issue allows remote authenticated site administrator users to execute arbitrary PHP code throughout a multisite network. Recommendations For WP Maintenance Mode plugin versions...
PT-2018-15262
Name of the Vulnerable Software and Affected Versions DedeCMS version V5.7 SP2 Description A security issue was found that allows remote attackers to upload and execute arbitrary PHP code. This can be achieved by using a double extension and a modified ".php" substring in the filename, in...
WordPress Snap Creek Duplicator Code Injection Exploit
When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters befo...
CVE-2018-19422
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...
CVE-2018-19422: Unrestricted Upload of File with Dangerous Type
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...
Code injection
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI...
PT-2018-14873
Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue allows remote attackers to execute arbitrary PHP code via the host parameter to the "install/" URI. Recommendations For LAOBANCMS version 2.0, consider restricting access to the install/ URI to minimi...
PT-2018-14841
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by placing the code in the DB PREFIX field, which is then written to database.php, when the index.php?s=index/install/setup...
Exploit for Improper Authentication in Phpmyadmin
CVE-2018-12613 Local file inclusion bug due to filter bypass u...
CVE-2018-19053
PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL generallogfile" statement, followed by a SELECT statement containing this PHP code...
CVE-2018-18934
PopojiCMS v2.0.1 is affected by CVE-2018-18934. The vulnerability lies in admin_component.php, exploitable through the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code, which is extracted and can be executed. This is...
CVE-2018-18934
An issue was discovered in PopojiCMS v2.0.1. admincomponent.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code that is extracted and can be executed. This can also be exploited via CSRF...
Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities
Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. PoC Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php...
PT-2018-14730
Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue was discovered in the software, where the admin component.php is exploitable via the "po-admin/route.php?mod=component&act=addnew" URI by using the fupload parameter to upload a ZIP file containing...
CVE-2018-18934: Cross-Site Request Forgery (CSRF)
An issue was discovered in PopojiCMS v2.0.1. admincomponent.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code that is extracted and can be executed. This can also be exploited via CSRF...
CVE-2018-18942: Unrestricted Upload of File with Dangerous Type
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...