44 matches found
PuppyCMS Arbitrary File Deletion Vulnerability
puppyCMS is a very simple, flat file CMS. An arbitrary file deletion vulnerability exists in puppyCMS version 5.1. The vulnerability stems from the fact that there is no path to any restriction. A remote attacker can exploit this vulnerability to delete files/folders via /admin/functions.php...
CVE-2020-18888
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...
CVE-2020-18888
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...
CVE-2020-18890
Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...
Arbitrary file deletion
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...
Remote code execution
Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...
CVE-2020-18888
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php...
CVE-2020-18888
The CVE-2020-18888 entry concerns puppyCMS v5.1 with an Arbitrary File Deletion vulnerability. According to the documents, a remote attacker can delete files/folders via the vulnerable endpoint /admin/functions.php, due to insufficient path validation/restrictions. The issue is described across m...
CVE-2020-18889
Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...
CVE-2020-18889
Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...
CVE-2020-18890
CVE-2020-18890 affects puppyCMS v5.1 (puppyCMS, puppetCMS) with an RCE due to insecure permissions. The vulnerability allows a remote attacker to gain shell access via /admin/functions.php. Root cause: insecure file/permission handling in the admin function. Impact is described as remote code exe...
CVE-2020-18890
Rmote Code Execution RCE vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php...
CVE-2020-18889
Cross Site Request Forgery CSRF vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php...
CVE-2020-18889
CVE-2020-18889 : The provided connected sources confirm a Cross-Site Request Forgery (CSRF) in puppyCMS version 5.1 that can change the administrator’s password via /admin/settings.php. The descriptions consistently identify the affected software and the vulnerable action, but do not include addi...
puppyCMS 跨站请求伪造漏洞
puppyCMS is a very simple, flat file CMS. A cross-site request forgery vulnerability exists in puppyCMS version 5.1. The vulnerability can be exploited to change the administrator password via /admin/settings.php...
puppyCMS 安全漏洞
puppyCMS is a very simple, flat file CMS. An arbitrary file deletion vulnerability exists in puppyCMS version 5.1. The vulnerability stems from the fact that there is no path to any restriction. A remote attacker can exploit this vulnerability to delete files/folders via /admin/functions.php...
puppyCMS 安全漏洞
puppetCMS is a small, simple, flat file CMS written in PHP. A remote code execution vulnerability exists in puppyCMS version 5.1. The vulnerability stems from insecure permissions. The vulnerability can be exploited by an attacker via /admin/functions.php as a getshell...
PuppyCMS Cross-Site Scripting Vulnerability
puppetCMS is a lightweight PHP-based content management system. A cross-site scripting vulnerability exists in puppyCMS version 5.1. A remote attacker can exploit this vulnerability by executing JavaScript code in the 'Add Page/URL' URL link field of the menu.php file...