37753 matches found
Aidex 代码注入漏洞
AiDex is an artificial intelligence chatbot from AiDex. A code injection vulnerability exists in Aidex versions prior to 1.7, which stems from improper handling of the content parameter in the /api//message endpoint, which could lead to a command execution attack...
Demtec Graphytics 代码注入漏洞
Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of HTTP GET parameters in the /visualization file, which could lead to a cross-site scripting attack...
Demtec Graphytics 代码注入漏洞
Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of the description parameter in the /visualization file, which could lead to a cross-site scripting attack...
Tiki Wiki CMS Groupware < 21.12, 22.0 < 24.8, 25.0 < 27.2, 28.0 < 28.3 Code Injection Vulnerability
Tiki Wiki CMS Groupware is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-3563
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attac...
CVE-2025-3563
The CVE-2025-3563 entry concerns WuzhiCMS 4.1. The vulnerability exists in the Setting Handler’s Set function of the /index.php?m=attachment&f=index&_su=wuzhicms&v=set&submit=1 path, where manipulating the Setting argument enables code injection. Documentation states remote exploitation is possib...
CVE-2025-3563 WuzhiCMS Setting index.php set code injection
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attac...
CVE-2025-3563 WuzhiCMS Setting index.php set code injection
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attac...
CVE-2025-3563 WuzhiCMS Setting index.php set code injection
A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attac...
PHPSHE 代码注入漏洞
PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE company. The system supports express tracking, online chat, order evaluation and statistics and other functions. PHPSHE 1.8 version of the existence of code injection vulnerability, the vulnerabilit...
db-hospital-drug 代码注入漏洞
db-hospital-drug is a hospital inventory management system by James Personal Developer. A code injection vulnerability exists in db-hospital-drug version 1.0, which stems from improper manipulation of the parameter content in the file ContentController.java, and could lead to a cross-site scripti...
PT-2025-16214 · Wuzhicms · Wuzhi Cms
Name of the Vulnerable Software and Affected Versions: WuzhiCMS version 4.1 Description: A critical issue was found in the Setting Handler component, specifically in the function Set of the file /index.php?m=attachment&f=index& su=wuzhicms&v=set&submit=1. The manipulation of the Setting argument...
My-Blog-layui 代码注入漏洞
My-Blog-layui is a blog system by ZHENFENG13 individual developer. A code injection vulnerability exists in My-Blog-layui version 1.0, which originates from a cross-site scripting issue in the file /admin/v1/link/edit...
WUZHI CMS 注入漏洞
WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1 version of an injection vulnerability, the vulnerability stems from improper operation of the parameter Setting in the file / index.php, which may lead to code injectio...
My-Blog-layui 代码注入漏洞
My-Blog-layui is a blog system by ZHENFENG13 individual developer. A code injection vulnerability exists in My-Blog-layui version 1.0, which originates from a cross-site scripting issue in the file /admin/v1/blog/edit...
uzy-ssm-mall 代码注入漏洞
uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh individual developer for building e-commerce, bookstore mall, customer management and so on. A code injection vulnerability exists in uzy-ssm-mall version 1.0.0, which stems from improper manipulation of the parameter productname ...
SAP ERP BW Business Content Code Injection Vulnerability
SAP ERP BW Business Content is a cloud-based e-commerce platform that helps companies create a personalized and seamless buying experience for their customers. SAP ERP BW Business Content suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary code...
📄 Langflow AI Remote Code Execution
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
GestioIP 3.5.7 - Stored Cross-Site Scripting (Stored XSS)
Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Stored Cross-Site Scripting Exploit Author: m4xth0r Maximiliano Belino Author website: https://maxibelino.github.io/ Author email: max.cybersecurity at belino.com GitHub disclosure link:...
