138 matches found
CVE-2018-14389: Improper Neutralization of Special Elements used in an SQL Command
joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...
oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in nextstateval during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetchtoken and...
CVE-2018-10083
CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...
CVE-2018-10083: Improper Limitation of a Pathname to a Restricted Directory
CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...
val-ledourner.com XSS vulnerability
Open Bug Bounty ID: OBB-523961 Description| Value ---|--- Affected Website:| val-ledourner.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
val-deco.com XSS vulnerability
Open Bug Bounty ID: OBB-472629 Description| Value ---|--- Affected Website:| val-deco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-17637
CVE-2017-17637 affects Car Rental Script 2.0.4 with an SQL Injection in the countrycode1.php file via the val parameter. Multiple sources (NVD, CNVD, CVE lists, related CNVD and PRION records) corroborate a vulnerability in this script where user-supplied input is used in SQL without proper sanit...
CVE-2017-17637: Improper Neutralization of Special Elements used in an SQL Command
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...
CVE-2016-4296
When opening a Hangul Hcell Document .cell and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore "" character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application wil...
libdwarf heap buffer overflow vulnerability (CNVD-2016-10045)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the libdwarf function dwarfgetsizeofval, which can be exploited by an attacker to execute arbitrary code...
WP Socializer 2.4.2 - admin/wpsr-services-selector.php val Parameter XSS
The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability...
CVE-2013-2671: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
Fedora Update for yubikey-val FEDORA-2011-15580
Check for the Version of yubikey-val OpenVAS Vulnerability Test Fedora Update for yubikey-val FEDORA-2011-15580 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for yubikey-val FEDORA-2011-15580
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : pam_yubico-2.8-1.fc16 / ykclient-2.6-1.fc16 / yubikey-val-2.10-1.fc16 (2011-15580)
security bugfix for CVE-2011-4120 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
CVE-2010-5052: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val parameter...
mpsw-rfi.txt
magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...
