30 matches found
EUVD-2018-3445
Malware in sbrugna...
EUVD-2021-21904
Malware in sbrugna...
EUVD-2018-3444
Malware in sbrugna...
CVE-2021-35261
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
Unrestricted file upload
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
BearAdmin 代码问题漏洞
BearAdmin is yupoxiong individual developer's backend management system based on ThinkPHP6.0+AdminLTE3.2. BearAdmin suffers from a security vulnerability that originates from allowing an attacker to execute arbitrary remote code via the Upfile function in the extend/tools/Ueditor endpoint...
CVE-2021-35261
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
CVE-2021-35261
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
CVE-2021-35261: Unrestricted Upload of File with Dangerous Type
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
CVE-2021-35261
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint...
PT-2023-12256
Name of the Vulnerable Software and Affected Versions Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 Description The issue allows an attacker to execute arbitrary remote code via the Upfile function of the "extend/tools/Ueditor" endpoint. This enables remote code...
CVE-2021-35261
CVE-2021-35261 affects Yupoxiong/BearAdmin prior to commit 10176153528b0a914eb4d726e200fd506b73b075. The issue is a file upload vulnerability in the Upfile function of the extend/tools/Ueditor endpoint, enabling arbitrary remote code execution. The NVD/CVE details report a CVSSv3.1 base score of ...
BearAdmin Arbitrary File Download Vulnerability
BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A security vulnerability exists in BearAdmin version 0.5. A remote attacker can exploit the vulnerability by sending the 'name' parameter with a directory traversal sequence to the /admin/databack/download.html page to...
BearAdmin SQL Injection Vulnerability
BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A SQL injection vulnerability exists in BearAdmin version 0.5, which originates from the admin\controller\AdminLog.php page failing to properly construct a MySQL query. A remote attacker can exploit the vulnerability by...
CVE-2018-11414
An issue was discovered in BearAdmin 0.5. There is admin/adminlog/index.html?userid= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly...
CVE-2018-11413
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
Directory traversal
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...
Sql injection
An issue was discovered in BearAdmin 0.5. There is admin/adminlog/index.html?userid= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly...
CVE-2018-11413
An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration...