CVE-2021-39327 BulletProof Security <= 5.1 Sensitive Information Disclosure

The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible /dbbackuplog.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up t...

Cross-Site Request Forgery (CSRF) in bigprof-software/online-rental-property-manager

✍️ Description csrf bug to create a backup 🕵️‍♂️ Proof of Concept Bellow request vulnerable to csrf bug which allow to create database backup GET /online-rental-property-manager/app/admin/pageBackupRestore.php?action=createbackup HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Ubuntu; Linux...

Design/Logic Flaw

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

CVE-2021-20114

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

PT-2021-13779

Name of the Vulnerable Software and Affected Versions: TCExam versions 14.8.1 and earlier Description: The issue allows unauthenticated users to access the "/cache/backup/" directory, which contains sensitive database backup files, when TCExam is installed with default or recommended settings...

CVE-2021-20114: Direct Request

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

IBOS Command Injection Vulnerability

IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...

IBOS Command Injection Vulnerability (CNVD-2021-46548)

IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...

CVE-2020-21785

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

Command injection

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2020-21785

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2020-21785

CVE-2020-21785 affects IBOS 4.5.4 Open, with a Command Injection vulnerability in the database backup component. The available connected records consistently describe the issue as a vulnerability in the backup process, but do not provide concrete exploit details, affected subcomponents beyond “da...

IBOS 代码问题漏洞

IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...

IBOS命令注入漏洞

IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...

PT-2021-10663

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.4 Description: The issue is related to a Command Injection Vulnerability in the database backup of IBOS. Recommendations: For IBOS version 4.5.4, at the moment, there is no information about a newer version that contains a fi...

CVE-2020-21785: Improper Neutralization of Special Elements used in a Command

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2021-24322

The Database Backup for WordPress plugin before 2.4 did not escape the backuprecipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue...

Cross site scripting

The Database Backup for WordPress plugin before 2.4 did not escape the backuprecipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue...

CVE-2021-24322

The Database Backup for WordPress plugin before 2.4 did not escape the backuprecipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue...

CVE-2021-24322

The CVE-2021-24322 entry concerns the WordPress Database Backup plugin prior to version 2.4. The vulnerability is a Stored XSS caused by not escaping the backup_recipient POST parameter before echoing it into an HTML attribute, enabling an attacker to inject malicious payloads. Affected product: ...