CVE-2023-26949

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-26949: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2018-16446: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...

Default Password 'password' for 'admin1' Account

The account 'admin1' on the remote host has the default password 'password'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin1"; password = "password";...

ispCP Omega <= 1.0.4 - Remote File Include Vulnerability

No description provided by source. + ispCP Omega = 1.0.4 Remote File Include Vulnerability + Discovered By: cr4wl3r + Download: http://isp-control.net/ + Dork: Powered by ispCP Omega + Code in ispcp-omega-1.0.4/gui/tools/filemanager/skins/mobile/admin1.template.php x ?php...