CVE-2018-14440

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

Design/Logic Flaw

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

CVE-2018-14440

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

CVE-2018-14441

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

Sql injection

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

CVE-2018-14441

CVE-2018-14441 describes an arbitrary file upload in the admin/fileUploadAction_fileUpload.action of cckevincyh SSH CompanyWebsite, affected through 2018-05-03. The issue allows uploading a .jsp file with an image/jpeg content type, enabling potential remote code execution via a uploaded JSP, as ...

CVE-2018-14441

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

CVE-2018-14440: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

CVE-2018-14441: Unrestricted Upload of File with Dangerous Type

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

PT-2018-12518

Name of the Vulnerable Software and Affected Versions cckevincyh SSH CompanyWebsite through 2018-05-03 Description An issue was discovered that allows arbitrary file upload. This is demonstrated by uploading a .jsp file with the content type set to image/jpeg. The upload is possible through the...

CVE-2018-14440

CVE-2018-14440 describes an SQL injection in the fictional product “cckevincyh SSH CompanyWebsite” affecting versions up to 2018-05-03, reachable via the admin/noticeManageAction_queryNotice.action?noticeInfo parameter. The issue arises from unsanitized input on this parameter, enabling potential...