Lucene search
K

7 matches found

Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.2 views

PT-2022-23160 · Unknown +1 · Silverwaregames.Io +1

Name of the Vulnerable Software and Affected Versions: SilverwareGames.io versions 1.1.8 and prior Description: SilverwareGames.io is a social network for users to play video games online. Due to an unobvious feature of PHP, hashes generated by built-in functions and starting with the 0e symbols...

5.9CVSS5.7AI score0.00244EPSS
Exploits0References4
NVD
NVD
added 2021/02/01 3:15 p.m.11 views

CVE-2021-21276

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

9.3CVSS9.2AI score0.1976EPSS
Exploits3References4
OSV
OSV
added 2021/02/01 3:15 p.m.14 views

CVE-2021-21276

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

9.3CVSS6.7AI score
Exploits0References4
Prion
Prion
added 2021/02/01 3:15 p.m.11 views

Code injection

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

6.4CVSS9AI score0.1976EPSS
Exploits3References4Affected Software1
Cvelist
Cvelist
added 2021/02/01 12:0 a.m.12 views

CVE-2021-21276 Privilege escalation in Polr

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

9.3CVSS9.3AI score0.1976EPSS
Exploits3References4
Packet Storm
Packet Storm
added 2020/02/03 12:0 a.m.135 views

phpList 3.5.0 Authentication Bypass

Exploit Title: phpList 3.5.0 - Authentication Bypass Google Dork: N/A Date: 2020-02-03 Exploit Author: Suvadip Kar Author Contact: https://twitter.com/spidersec Vendor Homepage: https://www.phplist.org Software Link: https://www.phplist.org/download-phplist/ Version: 3.5.0 Tested on: Linux CVE :...

0.3AI score
Exploits0
0day.today
0day.today
added 2020/02/03 12:0 a.m.154 views

phpList 3.5.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: phpList 3.5.0 - Authentication Bypass Exploit Author: Suvadip Kar Author Contact: https://twitter.com/spidersec Vendor Homepage: https://www.phplist.org Software Link: https://www.phplist.org/download-phplist/ Version: 3.5.0...

7.1AI score
Exploits0
Rows per page
Query Builder