CVE-2018-8965

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8965

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8969

An issue was discovered in zzcms 8.2. user/licencesave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

Directory traversal

An issue was discovered in zzcms 8.2. user/licencesave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8969

CVE-2018-8969 affects zzcms 8.2, specifically the user/licence_save.php endpoint. The vulnerability allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter of an action=modify request, which can be used to progress to database access by deleting...

CVE-2018-8968

An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

CVE-2018-8968

CVE-2018-8968 affects zzCMS version 8.2, specifically the user/manage.php endpoint. A vulnerability in the handling of directory traversal sequences in the oldimg and oldflv parameters within an action=modify request allows remote attackers to delete arbitrary files (including install.lock), crea...

CVE-2018-8965

The CVE-2018-8965 entry affects zzcms v8.2, specifically the user/ppsave.php endpoint. An issue in the oldimg parameter of an action=modify request allows remote attackers to perform directory traversal and delete arbitrary files (notably install.lock), enabling potential database access. Evidenc...

YUNUCMS \app\admin\controller\Common.php page has secondary injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS V1.0.7 \app\admin\controller\Common.php page has a secondary injection vulnerability. An attacker can exploit the vulnerability ...

What are Hung Threads and why is the StreamProcess terminating?

On PVS Servers StreamProcess Hung Threads can lead to poor performance, constant target re-connections and even full outages. These Hung Threads are usually detected by looking at the Windows Application Event logs. The following Events will be recorded: Level| Source| Id| Text ---|---|---|---...

Dell EMC Data Protection Advisor Local Hardcoded Credential Information Disclosure Vulnerability

Dell EMC Data Protection Advisor is a suite of data protection management solutions from Dell USA. The solution supports automated and centralized execution of all such data collection and analysis, as well as obtaining a single comprehensive view of the data protection environment and activities...

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

Bacula-Web < 8.0.0-rc2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Multiple SQL injection vulnerabilities in Bacula-Web Date: 2018-03-07 Software Link: http://bacula-web.org/ Exploit Author: Gustavo Sorondo Contact: http://twitter.com/iampuky Website: http://cintainfinita.com/ CVE: CVE-2017-153...

SQL Injection Vulnerability in xycms Advertising Design Center Website System

xycms advertising design center website system is to asp + access for the development of advertising company website. A SQL injection vulnerability exists in the xycms Advertising Design Center website system. The vulnerability stems from the program's failure to effectively filter the variable...

Bacula-web SQL Injection Vulnerability

Bacula-Web is a suite of web-based applications for reporting and monitoring Bacula backup software. A SQL injection vulnerability exists in Bacula-Web versions prior to 8.0.0-rc2. A remote attacker could exploit this vulnerability to access the Bacula database and elevate privileges...

Sql injection

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

CVE-2017-15367

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...