6 matches found
Arbitrary file deletion
AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...
5.5CVSS6.5AI score0.01075EPSS
SaveExploits1References1Affected Software1
CVE-2020-18167
Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...
5.5AI score0.00865EPSS
SaveExploits1References1
CVE-2018-10736
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...
7.2CVSS7.1AI score0.42556EPSS
SaveExploits2References2
Sql injection
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...
6.5CVSS7.3AI score0.42556EPSS
SaveExploits2References1Affected Software1
20