Lucene search
+L

3343 matches found

Mend
Mend
•added 2021/08/24 7:34 p.m.•2 views

CVE-2020-18917

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...

8.8CVSS0.00836EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/08/24 7:34 p.m.•44 views

CVE-2020-18917

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...

9AI score0.00836EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•8 views

CVE-2020-18917: Cross-Site Request Forgery (CSRF)

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...

8.8CVSS6.4AI score0.00836EPSS
SaveExploits1References2
OSV
OSV
•added 2021/08/23 9:15 p.m.•30 views

CVE-2021-39608

Remote Code Execution RCE vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code...

7.2CVSS7.7AI score
SaveExploits0References2
Prion
Prion
•added 2021/08/23 9:15 p.m.•29 views

Remote code execution

Remote Code Execution RCE vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code...

9CVSS7.2AI score0.45948EPSS
SaveExploits4References2Affected Software1
Mend
Mend
•added 2021/08/23 8:28 p.m.•2 views

CVE-2021-39608

Remote Code Execution RCE vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code...

9CVSS0.45948EPSS
SaveExploits4References2
Cvelist
Cvelist
•added 2021/08/23 8:28 p.m.•61 views

CVE-2021-39608

Remote Code Execution RCE vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code...

7.5AI score0.45948EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2021/08/23 12:00 a.m.•2 views

PT-2021-22674

Name of the Vulnerable Software and Affected Versions: FlatCore-CMS version 2.0.7 Description: A Remote Code Execution RCE issue exists via the upload addon plugin, allowing a remote malicious user to execute arbitrary PHP code. Recommendations: For FlatCore-CMS version 2.0.7, consider disabling...

9CVSS0.45948EPSS
SaveExploits4References6
Prion
Prion
•added 2021/08/17 7:15 p.m.•37 views

Remote code execution

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

7.5CVSS9.8AI score0.0282EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/17 6:52 p.m.•2 views

CVE-2020-22937

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

9.8CVSS0.0282EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/08/09 8:39 p.m.•76 views

Code injection in topthink/think

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

9.8CVSS9.8AI score0.02474EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/08/02 12:00 a.m.•20 views

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer allows a attacker to execute arbitrary PHP code.

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

10CVSS8.2AI score0.36632EPSS
SaveExploits5References5Affected Software1
NVD
NVD
•added 2021/07/26 8:15 p.m.•41 views

CVE-2020-17952

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

9.8CVSS0.02474EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/07/26 7:48 p.m.•54 views

CVE-2020-17952

A remote code execution RCE vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code...

10AI score0.02474EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/07/26 12:00 a.m.•2 views

PT-2021-10114

Name of the Vulnerable Software and Affected Versions: Twothink version 2.0 Description: A remote code execution issue in the /library/think/App.php file of Twothink allows attackers to execute arbitrary PHP code. Recommendations: For Twothink version 2.0, at the moment, there is no information...

9.8CVSS0.02474EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2021/07/16 11:15 a.m.•11 views

CVE-2021-21804

A local file inclusion LFI vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 20.10.2020. A specially crafted HTTP request can lead to arbitrary PHP code execution. An attacker can send a crafted HTTP request to trigger this vulnerability...

9.8CVSS7.3AI score0.03705EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/07/16 12:00 a.m.•97 views

Advantech R-SeeNet File Inclusion Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet suffers from a file inclusion vulnerability, which stems from the failure ...

9.8CVSS2.5AI score0.03705EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/17 4:15 p.m.•31 views

Code injection

Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework before 1.2.2 wp-content/themes/elemin/themify/themify-ajax.php file...

7.5CVSS8.1AI score0.03875EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2021/06/17 3:15 p.m.•39 views

CVE-2020-25414

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code...

9.8CVSS0.02032EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/17 3:15 p.m.•31 views

Remote file inclusion

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code...

7.5CVSS9.4AI score0.02032EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder