PT-2018-14842

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows for arbitrary file deletion. This can be achieved by exploiting the statics/ueditor/php/controller.php "action=remove" key parameter, where an attacker can use directory traversal to delete...

stockex.co.tt XSS vulnerability

Open Bug Bounty ID: OBB-605007 Description| Value ---|--- Affected Website:| stockex.co.tt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Joomla! Zh YandexMap 6.2.1.0 SQL Injection

input name="id" value="-11 UNION ALL SELECT...

CVE-2018-6308: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the defaultcurrencyname parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate...

PT-2017-14603

Name of the Vulnerable Software and Affected Versions dayrui FineCms versions 5.2.0 before 2017.11.16 Description The issue concerns a Cross Site Scripting XSS problem. It is located in the core/M Controller.php file via the DR URI field. Recommendations For dayrui FineCms versions 5.2.0 before...

CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

CVE-2017-5487: Exposure of Sensitive Information to an Unauthorized Actor

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

CVE-2015-7816

The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...

PT-2015-7626

Name of the Vulnerable Software and Affected Versions Piwik versions prior to 2.15.0 Description The issue allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header. This is due to a...

CVE-2015-7816: Undefined Security Weakness

The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery SSRF attacks, and execute arbitrary PHP code via a crafted HTTP header...

CVE-2015-1060

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

PT-2015-5047

Name of the Vulnerable Software and Affected Versions AdaptCMS version 3.0.3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header. This is due to an open redirect vulnerability in the...

CVE-2015-1060: Undefined Security Weakness

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

ImpressPages CMS 3.6 - Arbitrary File Deletion

ImpressPages CMS 3.6 - Arbitrary File Deletion ImpressPages CMS v3.6 Remote Arbitrary File Deletion Vulnerability Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content management system with...

PT-2012-1991

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.12 Description The issue allows remote attackers to inject arbitrary web script or HTML via the HTTP REFERER header to various components and templates, including 1 "components/com...

CVE-2011-4909: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTPREFERER header to 1 components/comcontent/views/article/tmpl/form.php, 2 components/comuser/controller.php, 3 plugins/system/legacy/html.php, or 4...

CVE-2011-5177: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to the admins 2 blocks, 3 articles, or 4 suggest-category; or 5 sort parameter to the search page...

WordPress Plugin ProPlayer 4.7.7 - SQL Injection

Exploit Title: ProPlayer plugin tablePrefix."proplayerplaylist WHERE POSTID='$id'"; $playlistRow = mysqlfetchrow$query; return $this-withBackwardCompatibility$playlistRow2; ... if !empty$GET"ppplaylistid" header"Content-type: application/xml"; $xml =...

Path traversal

Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php, which reveal the full installation path...

PT-2011-3277

Name of the Vulnerable Software and Affected Versions Metaways Tine 2.0 Description The issue allows remote attackers to obtain sensitive information via unknown vectors in certain files, including 1 Crm/Controller.php, 2 Crm/Export/Csv.php, or 3 Calendar/Model/Attender.php. This reveals the full...