24 matches found
EUVD-2005-0858
Malware in sbrugna...
CVE-2022-25488
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
CVE-2024-7910 CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload
A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The...
CVE-2024-7910: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The...
PT-2023-31998 · Sourcecodester · Sourcecodester Engineers Online Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the processing of the file student avatar.php, allowing for unrestricted upload through the manipulation of the change argument. This issue can...
Sql injection
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
CVE-2022-25488: Improper Neutralization of Special Elements used in an SQL Command
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...
PT-2022-17323
Name of the Vulnerable Software and Affected Versions Atom CMS version 2.0 Description A SQL injection issue was discovered in Atom CMS via the id parameter in the "/admin/ajax/avatar.php" API endpoint. This allows for potential exploitation. Recommendations For Atom CMS version 2.0, as a tempora...
PT-2021-23650
Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A file upload issue exists, allowing attackers to change the avatar through teacher avatar.php in dashboard teacher.php. Uploaded files are stored in the...
PT-2021-16452
Name of the Vulnerable Software and Affected Versions: SourceCodester Learning Management System version 1.0 Description: The issue allows attackers to upload arbitrary files, which can lead to the execution of arbitrary code. This is achieved by uploading files to the student avatar.php script...
Discuz! ychat插件 SQL注入
discuz ychat插件注入漏洞tableychatrooms.phpcode 区域 public function fetchallbycategory$categoryID,$start=0,$limit=0 if!$categoryID return null; $result=array; $result=DB::fetchall"select from ".DB::table$this-table." where categoryID=".$categoryID." order by cnum desc ". DB::limit$start, $limit;//直接带入查询...
vBulletin vBSSO Single Sign-On 1.4.14 - SQL Injection
vBulletin vBSSO Single Sign-On 1.4.14 - SQL Injection Exploit Title: vBulletin vBSSO Single Sign-On – = 1.4.15 This plugin is vulnerable to SQL injection at the /vbsso/avatar.php file in the fetchUserinfo function. It requires a big UNION ALL SELECT query and commenting out the LIMIT function of...
vBulletin vBSSO Single Sign-On 1.4.14 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: vBulletin vBSSO Single Sign-On – = 1.4.15 This plugin is vulnerable to SQL injection at the /vbsso/avatar.php file in the fetchUserinfo function. It requires a big UNION ALL SELECT query and commenting out the LIMIT function of...
PT-2012-2031
Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 11.12.24 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension using "uploadify/upload admin avatar.php" or "uploadify/upload profile...
PT-2011-4724
Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 11.12.08 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the uid parameter in the...
Woltlab Burning Board 2.3.4 File Disclosure Vulnerability
Exploit for php platform in category web applications ========================================================= Woltlab Burning Board 2.3.4 File Disclosure Vulnerability ========================================================= Exploit Title: Woltlab Burning Board 2.3.4 File Disclosure...
phpbb 2.0.11 usercp-avatar.php 目录遍历漏洞
No description provided by source...
CVE-2006-7001: Undefined Security Weakness
Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2006-4545: Undefined Security Weakness
PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the SERVER parameter in 1 admin/avatar.php, 2 libs/archive.class.php, 3 libs/login.php, 4 libs/profiles.class.php, and 5 libs/profile/proccess.php. NOTE: CVE disputes thi...
