Campcodes Project Management System 代码问题漏洞

Campcodes Project Management System is a project management system from Campcodes, Inc. A code issue vulnerability exists in Campcodes Project Management System version 1.0, which stems from the parameter file in the file /forms/updateforms.php?action=changepic2&id=4 that can lead to unrestricted...

CVE-2024-10412

A vulnerability was found in Poco-z Guns-Medical 1.0. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /mgr/upload of the component File Upload. The manipulation of the argument picture leads to cross site scripting. The attack can be launched...

PT-2017-12483

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server affected versions not specified Description A vulnerability in the H.264 decoder function could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receiv...

SQL Injection Vulnerability in List_picture Parameter of SMiCMS Government Website System

State Micro CMS is one of the mainstream CMS systems in China, and is also the open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listpicture parameter SQL injection vulnerability, the vulnerability is due to the failure of the user to...

UBUNTU-CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

Piwigo 'rate_picture' function SQL injection vulnerability

Piwigo is a photo album script written in PHP. Piwigo suffers from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by taking the picturephp rate parameter...

Directory traversal

Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...

CVE-2007-6620: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...

CVE-2007-0605

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...

CVE-2007-0605: Undefined Security Weakness

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...