Maticsoft SNS v1.9 CMSUploadFile.aspx 任意文件上传漏洞

No description provided by source...

Lenovo Switch Center Remote Privilege Vulnerability

Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A remote elevation vulnerability exists in IBM System Networking Switch Center version 7.1.3.4 and earlier and...

ICZ MATCHA SNS Privilege Access Control Vulnerability

ICZ MATCHA SNS is a set of SNS software from ICZ Japan. A security vulnerability exists in ICZ MATCHA SNS 1.3.6 and earlier versions. A remote attacker can exploit this vulnerability to gain administrator privileges...

CVE-2015-5645

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

Code injection

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

Code injection

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5645

ICZ MATCHA SNS (MATCHA SNS) before 1.3.7 is vulnerable: remote authenticated users can obtain administrative privileges via unspecified vectors. Affected product: MATCHA SNS from ICZ Corporation, versions 1.3.6 and earlier. Root cause details are not specified in the provided documents; exploitat...

CVE-2015-5645

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

CVE-2015-5644

CVE-2015-5644 affects ICZ MATCHA SNS prior to 1.3.7. The installer fails to correctly configure the database, enabling a code injection path that allows a remote attacker to execute arbitrary PHP code. The vulnerability is tied to installer-time database configuration (CWE-94) and culminates in c...

CVE-2015-5644

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

PT-2015-7008

Name of the Vulnerable Software and Affected Versions ICZ MATCHA SNS versions prior to 1.3.7 Description The issue allows remote authenticated users to obtain administrative privileges. Recommendations For versions prior to 1.3.7, update to version 1.3.7 or later to resolve the issue...

CVE-2015-5645: Undefined Security Weakness

ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors...

PT-2015-7007

Name of the Vulnerable Software and Affected Versions ICZ MATCHA SNS versions prior to 1.3.7 Description The issue arises from the installer not properly configuring the database, allowing remote attackers to execute arbitrary PHP code. Recommendations For versions prior to 1.3.7, update to versi...

CVE-2015-5644: Improper Control of Generation of Code

The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

MATCHA SNS vulnerable to code injection

Overview MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#85118545: MATCHA SNS access restriction bypass vulnerability

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains an access restriction bypass vulnerability. Impact A user without administrative privileges may obtain administrative privileges. Solution Update the Software Update to the latest version according to the information...

JVN#08535069: MATCHA SNS vulnerable to code injection

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Impact An unauthenticated attacker who can execute the installer may execute arbitrary PHP code on the server where...

Samsung Patches Social Media Vulnerability in Millions of Devices

Samsung patched a vulnerability last month in SNS Provider, a popular application that manages other social media apps present in millions of its devices. If exploited the bug could have given attackers the ability to access to any personal information users stored on Facebook, LinkedIn and...

ThinkSNS某处任意上传文件漏洞，获取官方站点控制权

简要描述： ThinkSNS某处任意上传文件漏洞，可导致网站沦陷、用户数据泄露，你说是不是高危？ 详细说明： ThinkSNS群组上传文档处存在任意上传文件漏洞，可导致四个网站沦陷、用户数据泄露，你说是不是高危？ 1.我们打开一个群组上传文档 2.开始抓包，上传一个图片网马比如yy.jpg，然后在包里面改为yy.php 3.于是上传成功 看看文件，额 4.连一连 5.跨一跨 img src="https://images.seebug.org/upload/201301/090...