Lucene search
+L

21900 matches found

osv_cve
osv_cve
•added 2024/03/04 1:15 a.m.•25 views

CVE-2024-2155

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

4.3CVSS4.9AI score0.00513EPSS
SaveExploits0References3
NVD
NVD
•added 2024/03/04 1:15 a.m.•36 views

CVE-2024-2155

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

4.3CVSS4.7AI score0.00513EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/04 1:00 a.m.•112 views

CVE-2024-2155

The CVE-2024-2155 vulnerability affects SourceCodester Best POS Management System 1.0 and involves an index.php file inclusion: manipulating the page argument enables potential inclusion of local files. Multiple connected sources confirm this is a remote-vector issue with unknown specifics about ...

4.3CVSS4.7AI score0.00513EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/04 12:00 a.m.•29 views

PT-2024-18961 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A problematic issue affects the processing of the file index.php, where the manipulation of the page argument leads to file inclusion. This issue can be initiated remotely...

4.3CVSS7AI score0.00513EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/03/03 6:15 p.m.•22 views

CVE-2024-2150

A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to t...

5.3CVSS5.4AI score0.00607EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/03 6:15 p.m.•35 views

Design/Logic Flaw

A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to t...

5CVSS7.2AI score0.00607EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/01 10:15 p.m.•27 views

Remote file inclusion

A local file inclusion LFI in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at /customersupport/index.php...

7.2AI score0.00734EPSS
SaveExploits2References3
Exploit DB
Exploit DB
•added 2024/02/27 12:00 a.m.•668 views

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

Exploit Title: Wordpress Plugin Canto " def createadminfilelocaldir, localshell=None: if not os.path.existslocaldir: os.makedirslocaldir If...

9.8CVSS8.1AI score0.06958EPSS
SaveExploits9
Packet Storm
Packet Storm
•added 2024/02/27 12:00 a.m.•339 views

WordPress Canto Remote Shell Upload

Exploit Title: Wordpress Plugin Canto " def createadminfilelocaldir, localshell=None: if not os.path.exis...

9.8CVSS8.1AI score0.06958EPSS
SaveExploits9
zdt
zdt
•added 2024/02/27 12:00 a.m.•572 views

Wordpress Canto Plugin < 3.0.5 - Remote File Inclusion and Remote Code Execution Exploit

Exploit Title: Wordpress Plugin Canto " def createadminfilelocaldir, localshell=None: if not os.path.existslocaldir: os.makedirslocaldir If a local shell is p...

9.8CVSS8.1AI score0.06958EPSS
SaveExploits9
Prion
Prion
•added 2024/02/06 8:16 p.m.•47 views

Remote file inclusion

Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may exploit this vulnerability leading to unauthorized access to sensitive information...

3.3CVSS6.7AI score0.00615EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/02/02 4:15 p.m.•27 views

Remote file inclusion

MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered...

5CVSS7.2AI score0.00689EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2024/01/19 7:15 p.m.•19 views

CVE-2024-0728

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

9.8CVSS4.9AI score0.0073EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/19 7:15 p.m.•22 views

CVE-2024-0728

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

9.8CVSS6AI score0.0073EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/19 6:31 p.m.•44 views

CVE-2024-0728

ForU CMS (up to 2020-06-23) contains a file inclusion vulnerability in channel.php triggered by manipulating the c_cmodel parameter. This affects an unknown functionality within channel.php and can be exploited remotely; the exploit has been disclosed publicly (VDB-251551). Several sources (NVD, ...

9.8CVSS9.5AI score0.0073EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2024/01/15 4:15 p.m.•14 views

CVE-2024-0315

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

7.8CVSS5.8AI score0.00325EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/15 4:15 p.m.•29 views

CVE-2024-0315

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

7.8CVSS6.7AI score0.00325EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/15 4:15 p.m.•27 views

Remote file inclusion

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

4.3CVSS7.1AI score0.00325EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/15 4:02 p.m.•10 views

CVE-2024-0315 Remote file inclusion vulnerability in FireEye Central Management

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

6.6CVSS6.7AI score0.00325EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•8 views

CVE-2024-0315: Improper Control of Filename for Include/Require Statement in PHP Program

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process...

7.8CVSS7.3AI score0.00325EPSS
SaveExploits0References2
Rows per page
Query Builder