CVE-2018-14729

The database backup feature in upload/source/admincp/admincpdb.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code...

CVE-2018-14729

The CVE-2018-14729 entry affects Discuz! versions 2.5 and 3.4, where the database backup feature in upload/source/admincp/admincp_db.php enables remote attackers to execute arbitrary PHP code. The Red Hat, NVD, CVE list, and CNVD records confirm this backend command execution risk originates from...

WP Database Backup <= 5.1.2 - Unauthenticated OS Command Injection

The WP Database Backup WordPress plugin was affected by an Unauthenticated OS Command Injection security vulnerability...

Zikula Core CMS 2.0.13 Database Disclosure

Exploit Title : Zikula Core CMS 2.0.13 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/04/2019 Vendor Homepage : ziku.la Software Download Link : github.com/zikula/core/releases/download/2.0.13/2.0.zip Software Information Link :...

NIT-Warangal Dispensary Management System India 1.0 Database Disclosure

Exploit Title : NIT-Warangal Dispensary Management System India 1.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 15/04/2019 Vendor Homepage : nitw.ac.in Software Download Link : github.com/NIT-Warangal/DispensaryMS/archive/master.zip Sofwa...

Themosis Framework BookStore 1.3.0 Database Disclosure

Exploit Title : Themosis Framework BookStore 1.3.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/04/2019 Vendor Homepage : framework.themosis.com Software Download Link : github.com/themosis/bookstore/archive/master.zip Software...

Arbitrary Code Execution Vulnerabilities in SeaCmsV9.2 Backend

SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCmsV9.2 background arbitrary code execution vulnerability, SeaCMS background database backup, due to incomplete data filtering leads to arbitrary code execution, the attack can be exploited to obtain server privileges...

Web Wiz Forums 12.01 Database Disclosure

Exploit Title : Web Wiz Forums 12.01 Database Backup Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : webwiz.net Software Download Link : webwiz.net/web-wiz-forums/forum-downloads.htm Software Information Link :...

RVSiteBuilder RVGlobalSoft CMS 7.0 Bypass / Disclosure / SQL Injection

Exploit Title : RVSiteBuilder RVGlobalSoft CMS 7.0 Multiple Vulnerabilities Vulnerabilities are = SQL Injection / File Upload / Authentication Bypass / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Team Date : 14/02/2019 Vendor Homepages :...

CVE-2019-7718

An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=?php and admin/databack/bakuptables.php?2=fileputcontents URIs because...

Race condition

An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=?php and admin/databack/bakuptables.php?2=fileputcontents URIs because...

CVE-2019-7718

An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=?php and admin/databack/bakuptables.php?2=fileputcontents URIs because...

CVE-2019-7718

An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=?php and admin/databack/bakuptables.php?2=fileputcontents URIs because...

CVE-2019-7718

MetInfo 6.x contains a race condition in the backend database backup function. The issue allows an attacker to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=

Metinfo Competitive Conditions Vulnerability

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A competitive condition vulnerability exists in MetInfo. An attacker can exploit this vulnerability by means of a competitive condition in the backend database backup function via admin / index.php?n =...

WordPress plugin wp-contactpage-designer database backup information leakage vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An information disclosure vulnerability exists in the WordPress plugin wp-contactpage-designer database backup. An attacker c...

WordPress plugin zerotolaunch database backup arbitrary file download vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the WordPress plugin zerotolaunch database backup. An attacker can exploit...

Release Information for Veeam ONE 9.5 Update 4

Challenge Release information for Veeam ONE 9.5 Update 4 Cause Please confirm you are running version 9.0.0.2088, 9.5.0.3201, 9.5.0.3254 or 9.5.0.3801 prior to installing this update. You can check this under Help | About in Veeam ONE console. After upgrading, your build will be version 9.5.4.456...

eBrigade ERP 4.5 - Arbitrary File Download Exploit

Exploit for php platform in category web applications !/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @email protected | eBrigade...

eBrigade ERP 4.5 Arbitrary File Download

!/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @-------------------------------------------------------------@ | eBrigade ERP "...