Arbitrary File Read Vulnerability in CmsEasy

Ltd. CmsEasy easy to pass enterprise website system, also known as easy to pass enterprise website program, is easy to pass the company to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system foreground to generate html, ful...

CVE-2019-8288

Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...

Vesta Control Panel Cross-Site Scripting Vulnerability (CNVD-2018-09183)

Vesta Control Panel is an open source web hosting control panel. A cross-site scripting vulnerability exists in Vesta Control Panel version 0.9.8-20. A remote attacker can exploit this vulnerability by sending the 'path' parameter to the view/file/index.php URI to execute PHP code...

CVE-2018-9205

Vulnerability in avataruploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path...

tianchoy/blog SQL Injection Vulnerability

tianchoy/blog is a Chinese software developer Tian Chao developed a single-user blog creation program . A SQL injection vulnerability exists in tianchoy/blog 2017-09-12 and earlier versions. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the view.php file to...

Ruby on Rails remote code execution vulnerability analysis (CVE-2 0 1 6-0 7 5 2)-vulnerability warning-the black bar safety net

If your application uses a dynamic rendering path, such as render params:id, and then unfortunately, the application currently by the presence of local file inclusion and lead to remote code execution vulnerabilities, please quickly move your Rails to update to the latest version, or for your...

Butterfly ORGanizer 2.0.1 - id SQL Injection

Butterfly ORGanizer 2.0.1 - id SQL Injection 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Sa...

CVE-2007-1147

PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath parameter...