Juniper-CVE-2023-36845-Mass-Hunting

Juniper-CVE-2023-36845-Mass-Hunting Juniper RCE（リモートコード実行）CVE-2023-36845 は、Juniper のソフトウェアで確認された脆弱性です。この特定の欠陥によりリモートからのコード実行が可能となり、攻撃者はデバイスに物理的にアクセスすることなく、システム上で任意のコードを実行できる可能性があります。 検出方法: Shodan dork: http.favicon.hash:2141724739 SSL証明書や組織名など、関連する他のdorkと組み合わせて使用することで、よりターゲットを絞った検索が可能です。...

CVE-2025-13275

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-13275 Iqbolshoh php-business-website about.php unrestricted upload

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-13275: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has be...

PHP Business Website 代码问题漏洞

PHP Business Website is a PHP business website by the individual developer Iqbolshoh Ilhomjonov. PHP Business Website suffers from a code issue vulnerability that stems from incorrect manipulation of the file /admin/about.php, which could lead to unlimited uploads...

EUVD-2019-10775

Malware in sbrugna...

CVE-2024-41376

dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...

CVE-2024-41376

dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...

CVE-2024-41376: Path Traversal: 'dir\..\..\filename'

dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...

AVideo cross-site scripting vulnerability in the view/about.php page

The PHP file view/about.php is vulnerable to an XSS issue due to no sanitization of the user agent. At line 53, the website gets the user-agent from the headers through $SERVER'HTTPUSERAGENT' and echo it without any sanitization. In PHP, echo a user generated statement, here the User-Agent Header...

Duplicate Advisory: AVideo cross-site scripting vulnerability in the view/about.php page

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f98p-2hc5-fm7v. This link is maintained to preserve external references. Original Description WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...

Sql injection

A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2020-36543 SialWeb CMS about.php sql injection

A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2020-36543: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

PT-2022-8994

Name of the Vulnerable Software and Affected Versions SialWeb CMS affected versions not specified Description A critical issue was found in SialWeb CMS, affecting an unknown part of the file /about.php. The manipulation of the Id argument leads to sql injection. It is possible to initiate the...

PT-2022-12249

Name of the Vulnerable Software and Affected Versions Online-Movie-Ticket-Booking-System version 1.0 Description The issue concerns a lack of input validation on the id parameter in the about.php file. This allows an attacker to append SQL queries to the input, potentially extracting sensitive...

CVE-2021-44866: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database...

CVE-2019-20221

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

Cross site scripting

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

CVE-2019-20221

CVE-2019-20221 affects Support Incident Tracker (SiT!) version 3.67. The vulnerability is a Cross-Site Scripting (XSS) in the “Load Plugins” input on the config.php page, with the payload potentially executed on pages such as about.php. Multiple sources corroborate the issue across CVE records an...