Lucene search
+L

519 matches found

RedHat Linux
RedHat Linux
•added 2021/11/01 8:09 a.m.•21 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 7:47 a.m.•22 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
osv_cve
osv_cve
•added 2021/10/29 6:15 p.m.•16 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS8.2AI score0.0723EPSS
SaveExploits1References2
Prion
Prion
•added 2021/10/29 6:15 p.m.•31 views

Remote code execution

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

7.5CVSS9.6AI score0.0723EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/10/29 6:15 p.m.•13 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS8.2AI score0.0723EPSS
SaveExploits1References3
CVE
CVE
•added 2021/10/29 5:02 p.m.•74 views

CVE-2021-41646

The CVE-2021-41646 entry concerns Sourcecodester Online Reviewer System 1.0, where an attacker can achieve Remote Code Execution by uploading a maliciously crafted PHP file that bypasses image-upload filters. The vulnerability enables an attacker to run arbitrary PHP code on the server via a craf...

9.8CVSS8.2AI score0.0723EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/10/29 5:02 p.m.•42 views

CVE-2021-41646

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

10AI score0.0723EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•2 views

PT-2021-23365

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Reviewer System version 1.0 Description A Remote Code Execution RCE issue exists due to the ability to upload a maliciously crafted PHP file, which can bypass the image upload filters. Recommendations For Sourcecodester...

9.8CVSS0.0723EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•4 views

CVE-2021-41646: Unrestricted Upload of File with Dangerous Type

Remote Code Execution RCE vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS8.2AI score0.0723EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•20 views

Online Reviewer System 代码问题漏洞

Online Reviewer System is a software application. An online reviewer system. A security vulnerability exists in Sourcecodester Online Reviewer System version 2.0, which allows an attacker to bypass the image upload filter and upload a maliciously crafted PHP file...

9.8CVSS8.4AI score0.02498EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•16 views

Online Reviewer System 代码问题漏洞

Online Reviewer System is a software application. An online reviewer system. A security vulnerability exists in Sourcecodester Online Reviewer System version 1.0 that allows an attacker to execute remote code via the image upload field...

9.8CVSS8.9AI score0.046EPSS
SaveExploits1References2
zdt
zdt
•added 2021/09/22 12:00 a.m.•198 views

Online Reviewer System 1.0 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Online Reviewer System 1.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja Vendor Homepage: https://www.sourcecodester.com/php/12937/online-reviewer-system-using-phppdo.html Software Link:...

0.7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/04/28 12:00 a.m.•42 views

Online Reviewer System SQL Injection (CVE-2021-27130)

An SQL injection vulnerability exists in Online Reviewer System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.8AI score0.02213EPSS
SaveExploits1
CNVD
CNVD
•added 2021/04/19 12:00 a.m.•14 views

Online Reviewer System SQL Injection Vulnerability

Online Reviewer System is a software application. An online reviewer system. Online Reviewer System version 1.0 suffers from a SQL injection vulnerability that stems from an authentication bypass SQL injection vulnerability that could result in a reverse shell upload. No detailed vulnerability...

9.8CVSS8AI score0.02213EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/04/14 3:15 p.m.•18 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS7.3AI score0.02213EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/14 3:15 p.m.•28 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS0.02213EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/14 3:15 p.m.•11 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

9.8CVSS8.7AI score0.02213EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/14 3:15 p.m.•20 views

Sql injection

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

7.5CVSS9.7AI score0.02213EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/14 2:59 p.m.•39 views

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

10AI score0.02213EPSS
SaveExploits1References1
CVE
CVE
•added 2021/04/14 2:59 p.m.•66 views

CVE-2021-27130

Online Reviewer System 1.0 is affected by a SQL injection vulnerability that stems from an authentication bypass, enabling an attacker to bypass login and potentially upload a reverse shell. The flaw is documented across multiple sources (Red Hat, CNVD/CNNVD, CVE records) as a SQL injection throu...

9.8CVSS9.8AI score0.02213EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder