CVE-2017-5414: Exposure of Sensitive Information to an Unauthorized Actor

The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox 52 and Thunderbird 52...

Malicious Package

Overview Version 1.0.910 of cordova-plugin-china-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.910 of this modul...

CVE-2018-6095

Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page...

CMS Made Simple Arbitrary File Deletion Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by CMSMS team. The system supports role-based permission management system , wizard-based installation and update mechanism , intelligent caching mechanism , etc. admin dashboard is one of the administration panel . A...

Saxum Picker Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! Saxum Picker component that allows remote attackers to submit a special SQL request to manipulate the database, which can be used to obtain sensitive information or execute arbitrary code...

Saxum Picker, 3.2.10, SQL Injection

Saxum Picker, vesions 3.2.10 and previous, SQL Injection...

CVE-2018-7178

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

CVE-2018-7178

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

Sql injection

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

CVE-2018-7178

CVE-2018-7178 describes an SQL Injection in the Joomla! Saxum Picker component (version 3.2.10 and earlier) via the publicid parameter. The issue affects Saxum Picker and has high to critical impact: CVSS v3.0 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, and no us...

CVE-2018-7178

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

Joomla Saxum Picker 3.2.10 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Saxum Picker 3.2.10 - SQL Injection Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/sports-a-games/games/saxumpicker/ Software Download:...

Joomla! Saxum Picker 3.2.10 SQL Injection

Exploit Title: Joomla! Component Saxum Picker 3.2.10 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/sports-a-games/games/saxumpicker/ Software Download:...

PT-2018-17934

Name of the Vulnerable Software and Affected Versions Saxum Picker version 3.2.10 Description A SQL Injection issue exists in the Saxum Picker component for Joomla!, which can be exploited via the publicid parameter. Recommendations For Saxum Picker version 3.2.10, update to a newer version that...

CVE-2018-7178: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter...

Joomla! Component Saxum Picker 3.2.10 - SQL Injection

Exploit Title: Joomla! Component Saxum Picker 3.2.10 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/sports-a-games/games/saxumpicker/ Software Download:...

June 13, 2017—KB4022725 (OS Build 15063.413 and 15063.414)

None None...

CVE-2017-11405

In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file...

Multiple Cross-Site Scripting (XSS)

Moodle is vulnerable to multiple cross-site scripting XSS attacks. The attacks can be triggered because the file picker module does not properly handle filenames from users, allowing the attackers to upload files with filenames containing malicious code...

Schneider Electric U.motion Builder file_picker remote code execution vulnerability

U.motion Builder is a builder product from Schneider Electric France. A remote code execution vulnerability exists in Schneider Electric U.motion Builder filepicker. The user-specified upload path is not constrained, so any logged-in user can upload a file to any location in the system that is...