File Upload Vulnerability in PHPOA System of Guilin Tiansheng Zhichuang Information Technology Co.

PHPOA using PHP + MYSQL open source language , Guilin Born Wisdom Information Technology Co., Ltd. has been committed to application management software development at the grass-roots level . Guilin Tiansheng Zhichuang Information Technology Co., Ltd. PHPOA system file upload vulnerability,...

CVE-2020-1614

A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function VNF instance, which allows an attacker to take control of the vSRX VNF instance if they have the ability to access an administrative service e.g. SSH on the VNF, either locally, or...

File Upload Vulnerability in MetInfo Backend

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo backend file upload vulnerability can be exploited by attackers to upload malicious files and obtain site administration privileges...

File Upload Vulnerability in Liangjing OA Office System

Good Precision OA Office System is an application system that assists in the daily operation and management of an organization. A file upload vulnerability exists in Lite-On OA Office System, which can be exploited by attackers to upload malicious files and gain administrative privileges on the w...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

Remote code execution

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

EBCMS suffers from a file upload vulnerability (CNVD-2020-25888)

EBCMS is a website management system based on PHP+MYSQL. A file upload vulnerability exists in EBCMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...

PT-2022-6561 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.11.2 Description: The issue is related to trusting HTTP permission methods on the server side when referencing the vulnerable admin or user API, which could allow a remote malicious user to execute arbitrary code. It...

ZendTo Elevation of Privilege Vulnerability

ZendTo is a completely free web-based system that lets you conveniently send or receive files with no limit on file size and faster speeds. An elevation of privilege vulnerability exists in versions prior to ZendTo 5.22-2 Beta. The vulnerability stems from lib/NSSDropbox.php in ZendTo failing to...

CVE-2020-7935

Artica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an Unrestricted Upload Of A File With A Dangerous Type issue in the File Manager. An attacker can create a or use an existing directory that is externally accessible to store PHP files. The filename and the exac...

Anhui Yishang Digital Technology Co., Ltd. two law convergence information sharing platform has ultra vires loopholes

Ltd. is an e-commerce demonstration enterprise, based on the circulation industry to provide e-commerce platform construction, operation and promotion, network marketing, international market development services. The information sharing platform of Anhui Yi Shang Digital Technology Co., Ltd. has...

Enigma NMS Privilege Control Bypass Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A security vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. An attacker can exploit this vulnerability to bypass authorization controls and perform operations as an administrator...

Logic flaws and vulnerabilities in the campus fee payment platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. A logic flaw exists in the campus payment platform of Beijing Dike Yuanwang Technology Co., Ltd. that can be exploited by an attacker to reset a user's password and gain access to the...

PT-2020-12077 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/edit-news.php by adding a question mark ? followed...

PT-2020-12119 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/report-search.php by adding a question mark ?...

PT-2020-12095 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

PT-2020-12058 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of the Referer header in article.php, allowing attackers to execute Stored Blind XSS by injecting arbitrary web script or HTML. This is specifically...

PT-2020-12116 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/report-category.php by adding a question mark ?...

PT-2020-12100 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/manage-subscribers.php by adding a question mark ?...