Arbitrary file deletion

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

CVE-2020-36006: Undefined Security Weakness

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

PT-2021-11902

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/info.php. Recommendations: For AppCMS version 2.0.101, consider restricting access ...

CVE-2020-18167

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

CVE-2020-18167: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

PT-2021-3414

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting commands into the Homepage Introduction field of the component...

CVE-2020-18165: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...

PT-2021-3912

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting commands into the Website SEO Keywords field on the page...

Sql injection

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

CVE-2018-10736

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

CVE-2018-10736

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

CVE-2018-10736

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

CVE-2018-10736: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...

PT-2018-10074

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.13 Description A SQL injection issue was discovered via the key1 parameter in the "admin/info.php" API endpoint. Recommendations For versions prior to 5.4.13, update to version 5.4.13 or later to resolve the...