EUVD-2018-6417

Malware in sbrugna...

EUVD-2018-6307

Malware in sbrugna...

EUVD-2019-7225

Malware in sbrugna...

EUVD-2018-2175

Malware in sbrugna...

EUVD-2021-23927

Malware in sbrugna...

EUVD-2018-6306

Malware in sbrugna...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeatname="...

CVE-2018-14388

joyplus-cms 1.6.0 has XSS via the manager/adminajax.php cansearchdevice array parameter...

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

CVE-2018-10096

joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

Sql injection

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

CVE-2021-37358 affects SEACMS v210530. Multiple sources describe a SQL Injection via the admin_ajax.php?action=checkrepeat&v_name parameter, enabling remote attackers to execute arbitrary code. NVD lists high to critical severity (CVSS v2: 7.5/10; CVSS v3.1: 9.8/10) with network access, no authen...

CVE-2019-16660

joyplus-cms 1.6.0 has adminajax.php?action=savexml&tab=vodplay CSRF...

Cross site request forgery (csrf)

joyplus-cms 1.6.0 has adminajax.php?action=savexml&tab=vodplay CSRF...

CVE-2019-16660

joyplus-cms 1.6.0 has adminajax.php?action=savexml&tab=vodplay CSRF...

joyplus-cms SQL Injection Vulnerability (CNVD-2018-14239)

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A SQL injection vulnerability exists in the...

CVE-2018-14501

manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...

CVE-2018-14501

CVE-2018-14501 affects joyplus-cms 1.6.0, where manager/admin_ajax.php is vulnerable to SQL injection via crafted POST data starting with m_id=1 AND SLEEP(5). The vulnerability arises from unsanitized input passed to SQL queries in that endpoint, enabling an attacker to execute arbitrary SQL comm...