EUVD-2018-11246

Malware in sbrugna...

EUVD-2018-11247

Malware in sbrugna...

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

CVE-2018-19557

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images...

CVE-2018-19557

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images...

Sql injection

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

Authentication flaw

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images...

CVE-2018-19557

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images...

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

CVE-2018-19558

The CVE refers to arcms (a CMS) with a SQL injection flaw in json/newslist caused by unsanitized limit parameter processing in ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php (through 2018-03-19). Affected component is the web application’s PHP backend; the root cause is impro...

CVE-2018-19557

The CVE-2018-19557 issue affects arcms (a CMS based on layui/arphp). Affected versions up to 2018-03-19 allow access to index/main, user/useradd, and img/images without authentication due to a lack of authentication checks, enabling unauthorized access. Public sources (NVD/NVD-derived entries and...

arcms unauthorized access vulnerability

arcms is a content management system based on layui and arphp. A security vulnerability exists in arcms 2018-03-19 and earlier versions, which stems from the program failing to authenticate index/main, user/useradd, or img/images. An attacker can exploit the vulnerability to gain unauthorized...

PT-2018-15002

Name of the Vulnerable Software and Affected Versions arcms through 2018-03-19 Description An issue was discovered where no authentication is required for certain endpoints, including "index/main", "user/useradd", and "img/images". Recommendations For arcms through 2018-03-19, consider restrictin...

PT-2018-15003

Name of the Vulnerable Software and Affected Versions arcms through 2018-03-19 Description An issue exists in the software due to SQL injection via the limit parameter in the json/newslist endpoint. This is caused by files ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

CVE-2018-19558: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

arcms SQL Injection Vulnerability

arcms is a content management system based on layui and arphp. A SQL injection vulnerability exists in the ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php files in arcms 2018-03-19 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'limit'...

CVE-2018-19557: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images...