EUVD-2006-7083

Malware in sbrugna...

CVE-2024-55078

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2025-3096 · Unknown · Wukongcrm-11.0-Java

Name of the Vulnerable Software and Affected Versions: WukongCRM-11.0-JAVA version 11.3.3 Description: An arbitrary file upload vulnerability in the component /adminUser/updateImg allows attackers to execute arbitrary code via uploading a crafted file. This issue enables attackers to potentially...

CVE-2024-55078: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2022-28496

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

Command injection

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

PT-2023-12948 · Totolink · Totolink Outdoor Cpe Cp900

Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue concerns a command injection vulnerability in the setPasswordCfg function, which can be exploited via the adminuser and adminpass parameters. This allows attackers t...

CVE-2022-28496: Improper Neutralization of Special Elements used in a Command

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

TOTOLINK CP900 Command Injection Vulnerability

The TOTOLINK CP900 is a wireless router from China-based TOTOLINK. A security vulnerability exists in the TOTOLINK CP900 due to a command injection issue in the adminuser and adminpassparameter parameters of the setPasswordCfg function...

Cross site request forgery (csrf)

CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add...

PT-2020-17312

Name of the Vulnerable Software and Affected Versions CXUUCMS V3 version 3.1 Description The issue allows an attacker to add an administrator account via a CSRF vulnerability. This can be exploited through the "admin.php?c=adminuser&a=add" endpoint. Recommendations For CXUUCMS V3 version 3.1, as ...

CVE-2020-35347: Cross-Site Request Forgery (CSRF)

CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add...

CVE-2019-7569

An issue was discovered in DOYO aka doyocms 2.320140425 update. There is a CSRF vulnerability that can add a super administrator account via admin.php?c=aadminuser&a=add&run=1...

PT-2019-18652

Name of the Vulnerable Software and Affected Versions doyocms version 2.320140425 update Description An issue was discovered that allows for a CSRF vulnerability, enabling the addition of a super administrator account via the "admin.php?c=a adminuser&a=add&run=1" endpoint. The c, a, and run...

Viral Pictures And Video Script 2.0.0 SQL Injection

Exploit Title: Flippy HotViral a Viral Pictures and Video Script v2.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-hotviral-viral-funny-pictures-and-video-script/ Demo:...

Ultimate Viral Media Script 1.0 - id SQL Injection

Ultimate Viral Media Script 1.0 - id SQL Injection Exploit Title: Flippy eXtremeViral – Ultimate Viral Media Script v1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

template creature (sql/dd) Multiple Vulnerabilities

No description provided by source. ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Wordpress Cart66 Plugin 1.5.1.14 - Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerabilities: 1 CSRF 2 XSS Stored VULNERABILITY 1 CSRF Page affected: http://victimsite/wordpress/wp-admin/admin.php?page=cart66-products If the Wordpress admin were logged in and clicked on a link hosting code similar to the one in the PoC...

ESPCMS background login bypass vulnerability reference EXP-vulnerability warning-the black bar safety net

After a lapse of long time,children's shoes successively sent through the CMS vulnerabilities, today generally see, the problem there is that official or has been repaired loopholes. The problem is in the background files of adminsoft\control\adminuser. php file Code The problem is in the functio...

ESPCMS background login bypass bug-vulnerability warning-the black bar safety net

After a lapse of long time,children's shoes successively sent through the CMS vulnerabilities, today generally see, the problem there is that official or has been repaired loopholes. The problem is in the background files of adminsoft\control\adminuser. php file Code The problem is in the functio...