110 matches found
CVE-2024-10742 code-projects Wazifa System control.php sql injection
A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...
PT-2024-16506 · Unknown · Wazifa System
Name of the Vulnerable Software and Affected Versions: Wazifa System version 1.0 Description: A critical issue affects the processing of the file /controllers/control.php, where the manipulation of the argument leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-24202
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file...
PT-2022-26791 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: Dedecms version 5.7.101 Description: The issue is related to an arbitrary file upload vulnerability in the /dede/file manage control.php component, allowing attackers to execute arbitrary code by uploading a crafted PHP file. This vulnerabili...
PT-2022-25619 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.99 Description: The issue allows for an arbitrary file upload via the component /dede/file manage control.php. Recommendations: For DedeCMS version 5.7.99, at the moment, there is no information about a newer version that...
CVE-2020-17466
Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses...
Authentication flaw
Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses...
ZoneMinder SQL Injection Vulnerability (CNVD-2019-04693)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. SQL injection vulnerability exists in the skins/classic/views/control.php file in versions prior to ZoneMinder 1.32.3, which can be exploited by remote attackers to execute SQ...
CVE-2019-8428
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
CVE-2019-8428
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
UBUNTU-CVE-2019-8428
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
CVE-2019-8428
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
CVE-2019-8428
ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroupMonitorIds value...
KORA 2.7.0 - cid SQL Injection
KORA 2.7.0 - cid SQL Injection Exploit Title: KORA 2.7.0 - SQL Injection Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.matrix.msu.edu/ Software Link: https://sourceforge.net/projects/kora/files/latest/download Version: 2.7.0 Category: Webapps Tested on:...
KORA 2.7.0 - cid SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: KORA 2.7.0 - SQL Injection Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.matrix.msu.edu/ Software Link: https://sourceforge.net/projects/kora/files/latest/download Version: 2.7.0 Category:...
The likelihood of collaborative oa \app\proj\block\control.php SQL injection
No description provided by source...
The likelihood of collaborative oa \app\crm\block\control.php SQL injection
No description provided by source...
The likelihood of collaborative oa \app\cash\block\control.php SQL injection
No description provided by source...
Cicada-known CMS v5. 6 user-deny-reflective XSS vulnerability
Vulnerability overview Cicada-known open source version of the CMS v5. 6 in the user module of the deny method to render the template file, for user input of parameters for rendering, and not handled correctly, can lead to bypassing some of the filter, thereby causing the reflective XSS the...
