Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•9 views

PT-2026-95941

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable within the /reviewer 0/admins/assessments/subject/btn functions.php?action=remove endpoint...

7.5CVSS5.9AI score0.00431EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•7 views

PT-2026-95943

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in th...

7.5CVSS5.8AI score0.00431EPSS
SaveExploits0References10
Mend
Mend
•added 2024/08/20 12:00 a.m.•2 views

CVE-2024-42616

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...

8.8CVSS0.00295EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/08/20 12:00 a.m.•43 views

PT-2024-30067 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /admin/admin widgets.php endpoint with specific parameters: action=remove and widget=Statistics. This...

8.8CVSS6.8AI score0.00295EPSS
SaveExploits1References6
OSV
OSV
•added 2022/06/30 7:15 p.m.•14 views

CVE-2022-28127

A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...

9.1CVSS7.4AI score0.37934EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/11/11 12:00 a.m.•2 views

PT-2018-14842

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows for arbitrary file deletion. This can be achieved by exploiting the statics/ueditor/php/controller.php "action=remove" key parameter, where an attacker can use directory traversal to delete...

7.5CVSS0.01449EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/11 12:00 a.m.•3 views

CVE-2018-19181: Improper Limitation of a Pathname to a Restricted Directory

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file...

7.5CVSS7.3AI score0.01449EPSS
SaveExploits1References2
Rows per page
Query Builder