43 matches found
PT-2024-36025 · Rhinos +1 · Rhinos +1
Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows for an XSS attack via the tamper parameter in the "/admin/lib/phpthumb/phpthumb.php" API endpoint. An attacker could create a malicious URL and send it to a victim to obtain their session...
PT-2024-36021 · Rhinos · Rhinos
Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: A vulnerability could allow PHP code injection through the "search" parameter in /portal/search.htm, enabling a remote attacker to perform a reverse shell on the remote system and compromise the entire...
CVE-2024-5408: Improper Neutralization of Input During Web Page Generation
Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL...
CVE-2024-5407: Improper Control of Generation of Code
A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure...
CVE-2024-5409: Improper Neutralization of Input During Web Page Generation
RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain their session details...
RhinOS 代码注入漏洞
RhinOS is a web development framework. A code injection vulnerability exists in RhinOS version 3.0-1190, which stems from the ease of injecting PHP code via the search parameter in /portal/search.htm, which could lead to an attacker executing a reverse shell and compromising the entire...
RhinOS 安全漏洞
RhinOS is a web development framework. A security vulnerability exists in RhinOS version 3.0-1190, which originates from an easy cross-site scripting XSS attack via the search parameter in /portal/search.htm, which allows an attacker to steal details of a victim's user session by submitting a...
PT-2024-36022 · Rhinos · Rhinos
Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows a remote attacker to steal user session details by submitting a specially crafted URL, exploiting an XSS vulnerability through the search parameter of the "/portal/search.htm" API endpoin...
RavenDB 4.1.4 Cross Site Request Forgery / Cross Site Scripting
Exploit Title: RavenDB 4.1.4 | Multiple Vulnerabilities Date: 25.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://ravendb.net Software Link: https://ravendb.net/download Version: 4.1.4 Introduction Hibernating Rhinos, a global provider of database infrastructure solutions, empowers...
RhinOS Cross-Site Request Forgery Vulnerability
RhinOS is a set of Web development framework . A cross-site request forgery vulnerability exists in RhinOS version 3.0 build 1190. A remote attacker can exploit this vulnerability to download arbitrary files...
CVE-2018-18760
RhinOS 3.0 build 1190 allows CSRF...
CVE-2018-18760
RhinOS 3.0 build 1190 allows CSRF...
Cross site request forgery (csrf)
RhinOS 3.0 build 1190 allows CSRF...
CVE-2018-18760
CVE-2018-18760 affects RhinOS 3.0 build 1190 (RhinOS CMS 3.x). Connected sources describe a Cross-Site Request Forgery (CSRF) vulnerability that enables arbitrary file download through the web interface (e.g., download.php triggering with crafted parameters such as file/name/size/type). The explo...
CVE-2018-18760
RhinOS 3.0 build 1190 allows CSRF...
PT-2018-14633 · Rhinos · Rhinos
Name of the Vulnerable Software and Affected Versions: RhinOS version 3.0 build 1190 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For RhinOS version 3.0 build 1190, at the moment, there is no information about a newer version that contains a fix for...
RhinOS CMS 3.x - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3....
RhinOS CMS 3.x Arbitrary File Download
Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3.1 r0 / 3.x Category: Webapp...
RhinOS CMS 3.x - Arbitrary File Download
RhinOS CMS 3.x - Arbitrary File Download Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.e...
RhinOS CMS 3.x - Arbitrary File Download
Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3.1 r0 / 3.x Category: Webapp...