PT-2024-36021 · Rhinos · Rhinos

Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: A vulnerability could allow PHP code injection through the "search" parameter in /portal/search.htm, enabling a remote attacker to perform a reverse shell on the remote system and compromise the entire...

RhinOS 代码注入漏洞

RhinOS is a web development framework. A code injection vulnerability exists in RhinOS version 3.0-1190, which stems from the ease of injecting PHP code via the search parameter in /portal/search.htm, which could lead to an attacker executing a reverse shell and compromising the entire...

PT-2024-36025 · Rhinos +1 · Rhinos +1

Name of the Vulnerable Software and Affected Versions: RhinOS versions 3.0-1190 Description: The issue allows for an XSS attack via the tamper parameter in the "/admin/lib/phpthumb/phpthumb.php" API endpoint. An attacker could create a malicious URL and send it to a victim to obtain their session...

RhinOS 跨站脚本漏洞

RhinOS is a web development framework. A cross-site scripting vulnerability exists in RhinOS version 3.0-1190, which originates from an easy cross-site scripting XSS attack via the tamper parameter in /admin/lib/phpthumb/phpthumb.php, which allows an attacker to create malicious URLs in order to...

RavenDB 4.1.4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: RavenDB 4.1.4 | Multiple Vulnerabilities Date: 25.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://ravendb.net Software Link: https://ravendb.net/download Version: 4.1.4 Introduction Hibernating Rhinos, a global provider of database infrastructure solutions, empowers...

RhinOS Cross-Site Request Forgery Vulnerability

RhinOS is a set of Web development framework . A cross-site request forgery vulnerability exists in RhinOS version 3.0 build 1190. A remote attacker can exploit this vulnerability to download arbitrary files...

CVE-2018-18760

RhinOS 3.0 build 1190 allows CSRF...

CVE-2018-18760

RhinOS 3.0 build 1190 allows CSRF...

Cross site request forgery (csrf)

RhinOS 3.0 build 1190 allows CSRF...

CVE-2018-18760

RhinOS 3.0 build 1190 allows CSRF...

CVE-2018-18760

CVE-2018-18760 affects RhinOS 3.0 build 1190 (RhinOS CMS 3.x). Connected sources describe a Cross-Site Request Forgery (CSRF) vulnerability that enables arbitrary file download through the web interface (e.g., download.php triggering with crafted parameters such as file/name/size/type). The explo...

PT-2018-14633 · Rhinos · Rhinos

Name of the Vulnerable Software and Affected Versions: RhinOS version 3.0 build 1190 Description: The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations: For RhinOS version 3.0 build 1190, at the moment, there is no information about a newer version that contains a fix for...

RhinOS CMS 3.x - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3....

RhinOS CMS 3.x - Arbitrary File Download

RhinOS CMS 3.x - Arbitrary File Download Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.e...

RhinOS CMS 3.x Arbitrary File Download

Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3.1 r0 / 3.x Category: Webapp...

RhinOS CMS 3.x - Arbitrary File Download

Exploit Title: RhinOS CMS 3.x - Arbitrary File Download Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.saltos.org/ Software Link: https://netix.dl.sourceforge.net/project/rhinos/archived/r1190/RhinOS-en-3.0-1190.win32.exe Version: 3.1 r0 / 3.x Category: Webapp...

RhinOS 3.0 r1113 Local File Inclusion

------------------------------------------------------------------------ Software................RhinOS 3.0 r1113 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.saltos.net/portal/es/rhinos.htm Release Date............3/3/2011...

RhinOS 'gradient.php' Multiple Directory Traversal Vulnerabilities

RhinOS is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks. RhinOS 3.0 r1113 is vulnerable; other versions may also be...

RhinOS <= 3.0 r1113 Multiple Directory Traversal Vulnerabilities - Active Check

RhinOS is prone to multiple directory traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...