Lucene search
+L

65 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•7 views

CVE-2022-45009: Unrestricted Upload of File with Dangerous Type

Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leavesystem/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS6.5AI score0.01119EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/10/26 5:15 p.m.•16 views

CVE-2022-3672

A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...

6.1CVSS4AI score0.00365EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/26 12:00 a.m.•7 views

CVE-2022-3672: Improper Neutralization

A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...

6.1CVSS4.6AI score0.00365EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/10/26 12:00 a.m.•49 views

CVE-2022-3672 SourceCodester Sanitization Management System SystemSettings.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...

3.5CVSS6.2AI score0.00365EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/01 12:00 a.m.•49 views

Home Owners Collection Management System Remote Code Execution Vulnerability

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...

8.8CVSS5.4AI score0.23261EPSS
SaveExploits1References1
NVD
NVD
•added 2022/02/26 12:15 a.m.•30 views

CVE-2022-25094

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

8.8CVSS0.23261EPSS
SaveExploits1References1
CVE
CVE
•added 2022/02/25 11:22 p.m.•109 views

CVE-2022-25094

CVE-2022-25094 affects Home Owners Collection Management System v1.0. The vulnerability is a remote code execution (RCE) caused by handling of the cover parameter in SystemSettings.php, allowing an attacker to execute code on the vulnerable system. Multiple connected advisories and vendors corrob...

8.8CVSS9AI score0.23261EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/25 11:22 p.m.•35 views

CVE-2022-25094

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

9.3AI score0.23261EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/02/25 12:00 a.m.•8 views

PT-2022-17072

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a remote code execution RCE vulnerability. It can be exploited via the cover parameter in SystemSettings.php. Recommendations For Home Owners Collection...

8.8CVSS0.23261EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/02/25 12:00 a.m.•22 views

Home Owners Collection Management System 安全漏洞

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...

8.8CVSS6.4AI score0.23261EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/25 12:00 a.m.•10 views

CVE-2022-25094: Undefined Security Weakness

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

8.8CVSS8.2AI score0.23261EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/27 7:15 p.m.•18 views

CVE-2021-46428

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

9.8CVSS7.9AI score0.03226EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/01/27 7:15 p.m.•13 views

CVE-2021-46428

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

9.8CVSS5.9AI score0.03226EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/27 7:15 p.m.•23 views

Remote code execution

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

7.5CVSS9.6AI score0.03226EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/01/27 6:39 p.m.•81 views

CVE-2021-46428

CVE-2021-46428 affects Sourcecodester Simple Chatbot Application 1.0 (and earlier versions). The vulnerability is an RCE exposed via the bot_avatar parameter in SystemSettings.php, enabling remote code execution. The available sources indicate a high-severity impact with network access and no aut...

9.8CVSS9.6AI score0.03226EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•3 views

PT-2022-12703

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application versions 1.0 and previous versions Description A Remote Code Execution RCE issue exists, allowing for potential code execution via the bot avatar parameter in SystemSettings.php. Recommendations For...

9.8CVSS0.03226EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•6 views

CVE-2021-46428: Unrestricted Upload of File with Dangerous Type

A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...

9.8CVSS8.2AI score0.03226EPSS
SaveExploits1References2
NVD
NVD
•added 2021/09/07 6:15 a.m.•33 views

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

8.8CVSS0.04117EPSS
SaveExploits1References3
Prion
Prion
•added 2021/09/07 6:15 a.m.•29 views

Remote code execution

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

6.5CVSS8.9AI score0.04117EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/09/07 5:17 a.m.•42 views

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

9.2AI score0.04117EPSS
SaveExploits1References3
Rows per page
Query Builder