CVE-2020-14028

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker may write to or overwrite arbitrary files, with arbitrary content, usually with NT AUTHORITY\SYSTEM privileges...

Shopify: Script Editor preview token still working with uninstalled application, even for unpublished script

Within the Script Editor application, it is possible to preview a script on the storefront and proceed to purchase. Once the user click on the preview link, it opens https://shop.myshopify.com/admin/scripts/preview?scriptid=scriptid which then generate a preview token to be used by the storefront...

Zoho ManageEngine Desktop Central Directory Traversal Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A directory traversal...

CVE-2018-5337

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPTNAME field when modifying existing scripts...

DEBIAN-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

Mail.ru: XSS on e.mail.ru via postMessage

URI Get parameters based XSS in https://e.mail.ru/cgi-bin/login via combination of factors controllable script name via NUL characters inection, availability of script with known vulnerability within domain...

Image and Video Script - SQL Injection

Image and Video Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Image and Video Script Script Buy Now: http://www.scriptfolder.com/funzone-image-and-video-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Clone Of Oddee Script 1.1.3 SQL Injection

Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQ...

My Private Tutor Website Builder Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now: http://www.popularclones.com/products/My-Private-Tutor-Website-Builder Author: Ihsan Sencan Author Web:...

Vine VideoSite Creator Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihsan Senca...

Classifieds Script - 'term' SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Classifieds Script Script Buy Now:http://www.scriptfolder.com/scriptfolder-classifieds/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL Injection/Exploit ...

Questions and Answers Script 1.1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Online Tshirt Design Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Tshirt Design Script Script Buy Now: http://www.popularclones.com/products/Online-Tshirt-Designer Author:...

Flippa Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Flippa Website Script Script Buy Now: http://www.popularclones.com/products/Flippa-Website Author: Ihsan Sencan...

Fileserve Clone Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan...

Wetransfer Clone Script - Authentication Bypass

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Wetransfer Clone Script Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Wetransfer Clone Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Wetransfer Clone Script Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script Author: Ihsan...

Justdial Clone Script - Authentication Bypass

Justdial Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Justdial Clone Script Script Buy Now: http://www.popularclones.com/products/Justdial-Directory Author: Ihsan Sencan Author...

Fileserve Clone Script - Authentication Bypass

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

MC Yellow Pages Script - SQL Injection

MC Yellow Pages Script - SQL Injection Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author Web:...