CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT 최고의 주택 임대 관리 시스템 VERSION =1.0 PROBLEM TYPE 잘못된 접근 제어 Description 최고의 주택 임대 관리 시스템 v1.0은 index.php의 Page 매개변수를 통해 임의 파일 읽기 취약점이 존재하는 것으로 밝혀졌습니다. 이 취약점으로 인해 공격자는 임의의 PHP 파일을 읽고 애플리케이션 내의 다른 민감한 정보에 접근할 수 있습니다...

PluckCMS 4.7.10 - Unrestricted File Upload

Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck/ Software Link: https://github.com/pluck-cms/pluck/ Version: 4.7.10 Tested on: Windows CVE : CVE-2020-20969 Proof Of Concept GET...

EUVD-2011-3697

Malware in sbrugna...

EUVD-2012-4329

Malware in sbrugna...

EUVD-2011-3696

Malware in sbrugna...

EUVD-2018-11239

Malware in sbrugna...

EUVD-2018-3262

Malware in sbrugna...

EUVD-2006-7031

Malware in sbrugna...

EUVD-2007-4169

Malware in sbrugna...

EUVD-2012-1655

Malware in sbrugna...

EUVD-2006-1166

Malware in sbrugna...

EUVD-2006-2697

Malware in sbrugna...

EUVD-2011-3751

Malware in sbrugna...

EUVD-2022-1482

Malicious code in bioql PyPI...

EUVD-2024-32282

Malicious code in bioql PyPI...

EUVD-2022-44043

Malicious code in bioql PyPI...

WordPress PrivateContent-Mail Actions File Inclusion Vulnerability

WordPress PrivateContent-Mail Actions is the name of the plugin or feature module for mail actions and member management. WordPress PrivateContent-Mail Actions suffers from a file inclusion vulnerability that stems from improper file inclusion control, which can be exploited by an attacker to cau...

CVE-2025-24760 WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a through = 1.3.4...

CVE-2011-3808

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...

CVE-2011-3804

SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugin/tinymce/plugins/advimage/images.php...