PT-2019-13508

Name of the Vulnerable Software and Affected Versions Directus versions prior to 2.2.1 Description The issue allows for remote code execution due to the uploading of PHP files not being blocked. This can lead to uploads/ /originals remote code execution. Recommendations For versions prior to 2.2....

CVE-2019-13979: Unrestricted Upload of File with Dangerous Type

In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads//originals remote code execution...

Pluck Code Issue Vulnerability

Pluck is a content management system CMS developed using the PHP language. A code issue vulnerability exists in the data/inc/images.php file in Pluck 4.7.4 and earlier versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or...

SQL Injection Vulnerability in Seacms v9.9 Backend ad***_te***.php File

SeaCMS is a video-on-demand system based on PHP+MySql technology. A SQL injection vulnerability exists in the adte.php file in the background of Seacms v9.9. An attacker can exploit the vulnerability to obtain sensitive database information...

File Inclusion Vulnerability in mlecms v2.3

mlecms is a PHP + MYSQL based on the core development of the station-building system. A file inclusion vulnerability exists in mlecms v2.3. The vulnerability is due to unfiltered incoming parameters are directly spliced into file paths. An attacker can use this vulnerability to obtain php files...

WordPress Insert Or Embed Articulate Content 4.2997 Remote Code Execution

Exploit Title: Authenticated code execution in insert-or-embed-articulate-content-into-wordpress Wordpress plugin Description: It is possible to upload and execute a PHP file using the plugin option to upload a zip archive Date: june 2019 Exploit Author: xulchibalraa Vendor Homepage:...

InnoGames: Chaining Bugs: Leakage of CSRF token which leads to Stored XSS and Account Takeover (xs1.tribalwars.cash)

The referrer leaked the CSRF code, when opening an embedded PHP file set by the images function in tribe forums. Due to a premium function, which allows players to store and run Javascript scripts during the game, the session ID could be grabbed, as it was mistakenly embedded into the DOM. This...

SAET Impianti Speciali TEBE Small WebApp Path Traversal Vulnerability

SAET Impianti Speciali TEBE Small is a physical access control system from the Italian company SAET. webApp is one of the web-based management programs. A path traversal vulnerability exists in WebApp version v04.68 in SAET Impianti Speciali TEBE Small 05.01 build 1137, which can be exploited by ...

PT-2019-12848

Name of the Vulnerable Software and Affected Versions Bludit versions prior to 3.9.0 Description The issue allows remote code execution for an authenticated user. This can be achieved by uploading a php file while changing the logo through the /admin/ajax/upload-logo API endpoint. Recommendations...

CVE-2019-12548: Unrestricted Upload of File with Dangerous Type

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo...

Command Execution Vulnerability in the mi***.php File of S-CMS Enterprise Website Builder System

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system mi.php file there is a command execution vulnerability, an attacker can use the vulnerabilit...

CVE-2018-17180

OpenEMR up to version 5.0.1 Patch 7 is affected by a Directory Traversal vulnerability in the portal/lib/download_template.php via docid=../, exposing partial confidentiality. Root cause is improper path handling allowing traversal to access restricted files. A patch exists in 5.0.1 Patch 7 (and ...

Arbitrary file read vulnerability in zzzphp in***.php file

zzphp is a free website building system developed using PHP. An arbitrary file read vulnerability exists in the zzzphp in.php file. An attacker can exploit the vulnerability to read sensitive information...

PhreeBooks ERP 5.2.3 Remote Command Execution

Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category: Webapps Tested on: XAMPP for Linux 5.6.38...

PhreeBooks ERP 5.2.3 - Remote Command Execution

PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3...

PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit

Exploit for php platform in category web applications Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category:...

PhreeBooks ERP 5.2.3 - Remote Command Execution (1)

Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category: Webapps Tested on: XAMPP for Linux 5.6.38...

PHPOK d***.in***.php file has an arbitrary file read vulnerability

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. An arbitrary file read vulnerability exists in the PHPOK d.in.php file. An attacker can construct arbitrary file paths to obtain sensitive information by using a reverse-encoding method...

CVE-2019-10652: Unrestricted Upload of File with Dangerous Type

An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature...

SQL Injection Vulnerability in we***/we***.php, a generic framework for Xinhao Collaboration Office System

Xinhuo Co-operation Office System is an office system based on php and mysql development. SQL injection vulnerability exists in we/we.php, which can be exploited by attackers to obtain sensitive database information...