10 matches found
Jinher OA SQL注入漏洞
Jinher OA is a collaboration management software from China Jinher Jinher. A SQL injection vulnerability exists in Jinher OA 1.2 and earlier versions, which originates from improper handling of parameters in the /C6/Jhsoft.Web.departments/GetTreeDate.aspx file, which can lead to SQL injection...
WordPress plugin LIQUID SPEECH BALLOON 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
SUSE CVE-2014-5278
A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...
PT-2022-13769 · Unknown · Ebics-Java/Ebics-Java-Client
Name of the Vulnerable Software and Affected Versions: ebics-java/ebics-java-client versions prior to 1.2 Description: A vulnerability in the encryption implementation of EBICS messages in the open source library ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt...
Fastspot BigTree bigtree-form-builder input validation vulnerability
Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. bigtree-form-builder is one of the administrators used to build and collect the front-end user input information form . Fastspot BigTree bigtree-form-builder A security...
PT-2014-5099
Name of the Vulnerable Software and Affected Versions Elasticsearch versions prior to 1.2 Description The default configuration in Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to the search...
PHP Content Architect 0.9 pre 1.2 MFA_Theme.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23843/info PHP Content Architect is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...
NoAh <= 0.9 pre 1.2 (filepath) Remote File Disclosure Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== NoAh = 0.9 pre 1.2 filepath Remote File Disclosure Vulnerabilities ===================================================================== NoAh = 0.9 pre 1.2 filepath Remo...
NoAh 0.9 pre 1.2 - 'filepath' Remote File Disclosure
NoAh = 0.9 pre 1.2 filepath Remote File Disclosure Vulnerabilities Script : http://sourceforge.net/project/showfiles.php?groupid=131995 /noah0.9pre1.2.tar.gz/ Exploits : /noah/modules/nosystem/templates/cssfile.php?filepath=../../../../../../etc/passwd...
PT-2006-7608 · Freetype +2 · Freetype +2
Name of the Vulnerable Software and Affected Versions: libXfont versions prior to 1.2.0 freetype2-64bit affected versions not specified freetype2-devel-64bit affected versions not specified freetype2-x86 affected versions not specified FreeType versions prior to 2.2 Description: The issue is...