3 matches found
CVE-2019-13973
CVE-2019-13973 affects LayerBB 1.1.3, where the admin/general.php arbitrary file upload is possible because the custom_logo filename suffix is not restricted, allowing a ".php" file. The vulnerability stems from insufficient validation of uploaded logo names, enabling potential remote code execut...
9.8CVSS9.5AI score0.01753EPSS
SaveExploits1References1Affected Software1
Code injection
PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter...
3.5CVSS4.9AI score0.00492EPSS
SaveExploits1References1Affected Software1
QualiteamXCart远程命令执行漏洞
X-Cart是一款基于PHP的电子商务程序。X-Cart没有充分过滤URI的参数值，远程攻击者可以利用这个漏洞以WEB进程权限执行任意命令。问题存在与'admin/general.php'脚本上，由于对perlbinary参数值缺少充分过滤，提交任意SHELL命令，可导致以WEB进程权限在系统上执行任意命令。 Qualiteam X-Cart3.4.3 厂商补丁：Qualiteam --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：http://www.x-cart.com/...
7.1AI score
SaveExploits0
20