118 matches found
FluxCP 跨站脚本漏洞
FluxCP is rAthena open source a web-based control panel . Used for rAntha server written in PHP. A security vulnerability exists in a previous version of rAthena FluxCP, which stems from an unknown function in the file themes/default/servicedesk/view.php of the component Service Desk Image URL...
Moddable SDK 缓冲区错误漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in the Moddable SDK that originates from an out-of-bounds read security issue in the fxUint8Getter function in...
WordPress 安全漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. SQL injection vulnerability exists in the WordPress plugin Fancy Product Designer 4.7.4 and earlier,...
CVE-2021-32607
An issue was discovered in Smartstore aka SmartStoreNET through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message...
PT-2020-12260
Name of the Vulnerable Software and Affected Versions SAE IT-systems FW-50 Remote Telemetry Unit RTU affected versions not specified Description A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...
Arbitrary File Read Vulnerability in CmsEasy
Ltd. CmsEasy easy to pass enterprise website system, also known as easy to pass enterprise website program, is easy to pass the company to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system foreground to generate html, ful...
CVE-2019-8288
Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...
Vesta Control Panel Cross-Site Scripting Vulnerability (CNVD-2018-09183)
Vesta Control Panel is an open source web hosting control panel. A cross-site scripting vulnerability exists in Vesta Control Panel version 0.9.8-20. A remote attacker can exploit this vulnerability by sending the 'path' parameter to the view/file/index.php URI to execute PHP code...
CVE-2018-10686
An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $REQUEST'path' to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a fileputcontents call in web/upload/UploadHandler.php...
PT-2018-10053
Name of the Vulnerable Software and Affected Versions Vesta Control Panel version 0.9.8-20 Description An issue was discovered that allows for Reflected XSS via the path variable in the view/file/index.php URI. This can potentially lead to remote PHP code execution through vectors involving a fil...
CVE-2018-10686: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $REQUEST'path' to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a fileputcontents call in web/upload/UploadHandler.php...
CVE-2018-9205
Vulnerability in avataruploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path...
tianchoy/blog SQL Injection Vulnerability
tianchoy/blog is a Chinese software developer Tian Chao developed a single-user blog creation program . A SQL injection vulnerability exists in tianchoy/blog 2017-09-12 and earlier versions. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the view.php file to...
PT-2017-16140
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.0 through 11.5 Description A vulnerability in the exporting functions of the user interface could allow an authenticated, remote attacker to view file directory listings and download files...
Ruby on Rails remote code execution vulnerability analysis (CVE-2 0 1 6-0 7 5 2)-vulnerability warning-the black bar safety net
If your application uses a dynamic rendering path, such as render params:id, and then unfortunately, the application currently by the presence of local file inclusion and lead to remote code execution vulnerabilities, please quickly move your Rails to update to the latest version, or for your...
PT-2011-1403
Name of the Vulnerable Software and Affected Versions Horde Gollem versions prior to 1.1.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the file parameter in a "view file" action...
Butterfly ORGanizer 2.0.1 - id SQL Injection
Butterfly ORGanizer 2.0.1 - id SQL Injection 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Sa...