dayrui FineCms 'oauth' function cross-site scripting vulnerability

dayrui FineCms is China Tianrui dayrui program design team released a set of content management system CMS using MVC architecture and PDO database interface development. A cross-site scripting vulnerability exists in the 'oauth' function of the controllers/member/api.php file in version 5.0.11 of...

Android Bypass Access Restrictions

The vulnerability in the server/TetherController.cpp file of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created application...

PT-2011-1859 · Clearbudget · Clearbudget

Name of the Vulnerable Software and Affected Versions: clearBudget version 0.9.8 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter in the logic/controller.class.php file. This is a remote file inclusion issue. Note that this issue h...

CVE-2002-0773

improotdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to improotdir.asp and modifying parameters such as 1 ftp, 2 owwwPath, and 3 oftpPath...