CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

EUVD-2020-14968

Malware in sbrugna...

EUVD-2002-0552

Malware in sbrugna...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

Malicious code in discord-yp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0d2252fab3f11a50edd63d2fc7a07cf9a5fa74bbe2702926fc744312a06b8023 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

Sql injection

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

CVE-2020-22203

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

CVE-2020-22203: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php...

PT-2021-10745 · Phpcms · Phpcms

Name of the Vulnerable Software and Affected Versions: phpCMS 2008 sp4 Description: The issue allows remote malicious users to execute arbitrary php commands. This is achieved via the pagesize parameter to the "yp/product.php" endpoint. Recommendations: For phpCMS 2008 sp4, consider restricting...

PT-2021-10746

Name of the Vulnerable Software and Affected Versions phpCMS 2008 sp4 Description The issue is related to SQL Injection in phpCMS via the genre parameter to "yp/job.php" API endpoint. Recommendations For phpCMS 2008 sp4, as a temporary workaround, consider restricting access to the "yp/job.php" A...

CVE-2020-22201: Improper Control of Generation of Code

phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php...

PHPCMS SQL Injection Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, images, downloads, information, products and so on. A SQL injection vulnerability exists in phpCMS because the genre parameter in the yp/job.php file is not handled securely,...

OpenSSH 3.2.2 Security Vulnerability

A possible security issue for sshd in OpenBSD has been reported. A vulnerability related to the implementation of BSD authentication exists in sshd that may have security implications. In access configurations which use YP with netgroups, sshd will authenticate users via ACL by checking for the...

glampers-yp.com Cross Site Scripting vulnerability OBB-1413937

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

gainful.silver.yp.com.hk Cross Site Scripting vulnerability OBB-1235014

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2019-12543

Name of the Vulnerable Software and Affected Versions WaspThemes Visual CSS Style Editor plugin versions prior to 7.2.1 Description The issue allows for a CSRF attack, potentially granting admin access through the use of yp remote get. Recommendations For versions prior to 7.2.1, update to versio...

Fedora 29 : icecast (2018-b881073c43)

This release fixes buffer overflows in URL authentication code CVE-2018-18820, a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords...

Fedora 27 : icecast (2018-f3d995c6a8)

This release fixes buffer overflows in URL authentication code CVE-2018-18820, a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords...