Joomla! < 3.9.3 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

CVE-2019-7740

An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code core.js writeDynaList could lead to an XSS attack vector...

CVE-2019-7740

An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code core.js writeDynaList could lead to an XSS attack vector...

Design/Logic Flaw

An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code core.js writeDynaList could lead to an XSS attack vector...

CVE-2019-7740

An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code core.js writeDynaList could lead to an XSS attack vector...

The vulnerability in the RubyGems package management system arises from improper handling of parameters, allowing users to compromise data integrity.

The vulnerability of the RubyGems package management system is related to the improper handling of HTTP/FTP request parameters, which can lead to incorrect URL formation. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

[20190205] - Core - XSS Issue in core.js writeDynaList

Inadequate parameter handling in JS code could lead to an XSS attack vector...

ShopsN open source online store full system PayOrderController page there are code execution vulnerabilities

ShopsN free version of the B2C e-commerce is a Shanghai Yisu Network Technology Co., Ltd. in line with the enterprise-level commercial standards full-featured really allow free commercial use of open source online store full network system. ShopsN v2.3.5 official version of the PayOrderController...

LG SuperSign EZ CMS 2.5 Remote Code Execution

Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.10 CVE : CVE-2018-17173 1. Description LG...

LG SuperSign EZ CMS 2.5 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.1...

LG SuperSign EZ CMS 2.5 - Remote Code Execution

LG SuperSign EZ CMS 2.5 - Remote Code Execution Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG Web...

LG SuperSign EZ CMS 2.5 - Remote Code Execution

Exploit Title: LG SuperSign EZ CMS 2.5 - Remote Code Execution Date: 2018-09-18 Exploit Author: Alejandro Fanjul Vendor Homepage:https://www.lg.com Software Link: https://www.lg.com/ar/software-lg-supersign Version: SuperSignEZ 1.3 Tested on: LG WebOS 3.10 CVE : CVE-2018-17173 1. Description LG...

(0Day) Wecon LeviStudioU UserManage GroupIdSet Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Open Redirect

github.com/s-gv/orangeforum is susceptible to open redirect attacks. The attacks exist because views/auth.go does not properly handle the redirectURL parameter in LoginHandler and LogoutHandler, allowing an attacker to create a link to redirect users to a malicious webpage...

CVE-2018-7777

The vulnerability is due to insufficient handling of updatefile request parameter on updatemodule.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server...

CVE-2018-10350

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server Standalone 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\bwlists\handler.php. Authentication is...

Cross site scripting

ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...

CVE-2018-10428

ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting...

Trend Micro Smart Protection Server BWListMgmt SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Smart Protection Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of parameters provided to wcs\bwlists\handler.php. The...

The vulnerability of the ISC DHCP server, related to memory buffer overflow, allows attackers to cause service failures or gain unauthorized access to confidential data.

The vulnerability of the dhclient client is related to buffer overflows in the buffer used for processing DHCP parameters. Exploiting this vulnerability allows a malicious actor to cause a service failure, and in some cases, to execute arbitrary code by sending a response from the DHCP server tha...