Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2023/07/13 12:00 a.m.•15 views

Desdev DedeCMS 代码问题漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A code issue vulnerability exists in...

9.8CVSS8.4AI score0.01178EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/27 10:42 a.m.•43 views

CVE-2023-0528 SourceCodester Online Tours & Travels Management System abc.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

5.8CVSS7AI score0.00564EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•4 views

CVE-2023-0528: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.3CVSS5.5AI score0.00564EPSS
SaveExploits1References2
CVE
CVE
•added 2018/04/19 8:00 a.m.•53 views

CVE-2018-10220

Glastopf 3.1.3-dev has a Server-Side Request Forgery (SSRF) vulnerability demonstrated via the abc.php?a parameter. The vendor states this behavior is intentional because Glastopf is a web application honeypot, and the distribution includes modules/emulators/rfi.py for Remote File Inclusion emula...

8.8CVSS8.7AI score0.01638EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/04/19 12:00 a.m.•17 views

PT-2018-9762 · Honeynet · Glastopf

Name of the Vulnerable Software and Affected Versions: Glastopf version 3.1.3-dev Description: The issue concerns a Server-Side Request Forgery SSRF in Glastopf, demonstrated through the abc.php a parameter. It is noted that the vendor considers this behavior intentional, as Glastopf is a web...

8.8CVSS9AI score0.01638EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/19 12:00 a.m.•4 views

CVE-2018-10220: Server-Side Request Forgery (SSRF)

Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation...

8.8CVSS7.7AI score0.01638EPSS
SaveExploits1References2
Rows per page
Query Builder