Lucene search
+L

6 matches found

Prion
Prion
•added 2017/12/13 9:29 a.m.•22 views

Sql injection

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

5CVSS8.1AI score0.01145EPSS
SaveExploits1References1
CVE
CVE
•added 2017/12/13 9:00 a.m.•76 views

CVE-2017-17568

CVE-2017-17568 affects Scubez Posty Readymade Classifieds, with an incorrect access control flaw on the admin/user_activate_submit.php backend script. The underlying issue allows remote attackers to obtain sensitive information via a direct request. Documents indicate potential information disclo...

7.5CVSS7.2AI score0.01384EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/12/13 9:00 a.m.•41 views

CVE-2017-17568

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...

7.4AI score0.01384EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/13 12:00 a.m.•11 views

CVE-2017-17569: Improper Neutralization of Input During Web Page Generation

Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...

6.1CVSS6.3AI score0.00669EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/13 12:00 a.m.•5 views

CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

7.5CVSS7.2AI score0.01145EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/13 12:00 a.m.•4 views

CVE-2017-17568: Incorrect Permission Assignment for Critical Resource

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...

7.5CVSS7.2AI score0.01384EPSS
SaveExploits1References2
Rows per page
Query Builder