PT-2018-12615

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.11 Description An issue exists in the Linux kernel where there is an invalid pointer dereference in the del reloc root function in fs/btrfs/relocation.c. This occurs when mounting a crafted btrfs image and i...

CVE-2017-2590: Incorrect Permission Assignment for Critical Resource

A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of servic...

CVE-2018-13056

An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcmsmain table and then making an img add request. This can be leveraged for database access by deleting install.lock...

Microsoft Windows: Interactive logon: Do not require CTRL+ALT+DEL

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winildisablecad.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Do not require CTRL+ALT+DEL Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

mi-horoscopo-del-dia.com XSS vulnerability

Open Bug Bounty ID: OBB-621856 Description| Value ---|--- Affected Website:| mi-horoscopo-del-dia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10083: Improper Limitation of a Pathname to a Restricted Directory

CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...

PT-2018-9668

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions through 2.2.7 Description: The issue concerns an arbitrary file deletion vulnerability in the admin dashboard. This occurs via directory traversal sequences in the val parameter within a 'cmd=del' request. The...

CVE-2018-9850

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an Admin-Data-del request...

PT-2018-19074

Name of the Vulnerable Software and Affected Versions Gxlcms QY version 1.0.0713 Description The issue allows remote attackers to delete any file via directory traversal sequences in the id parameter of an "Admin-Data-del" request. This is due to a vulnerability in the...

landing.agroindustriasdelnorte.com XSS vulnerability

Open Bug Bounty ID: OBB-585905 Description| Value ---|--- Affected Website:| landing.agroindustriasdelnorte.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

PT-2018-18604

Name of the Vulnerable Software and Affected Versions WampServer version 3.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the virtual del parameter. This can lead to the execution of malicious scripts on the client-side...

sheratonhaciendadelmar.honeymoonwishes.com XSS vulnerability

Open Bug Bounty ID: OBB-581464 Description| Value ---|--- Affected Website:| sheratonhaciendadelmar.honeymoonwishes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

las-f4-del-isaac-newton.globered.com XSS vulnerability

Open Bug Bounty ID: OBB-573383 Description| Value ---|--- Affected Website:| las-f4-del-isaac-newton.globered.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

raquel-del-rosario.blogs.elle.es XSS vulnerability

Open Bug Bounty ID: OBB-528610 Description| Value ---|--- Affected Website:| raquel-del-rosario.blogs.elle.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

dcmetroneighborhoods.com XSS vulnerability

Open Bug Bounty ID: OBB-472566 Description| Value ---|--- Affected Website:| dcmetroneighborhoods.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

PT-2017-13680

Name of the Vulnerable Software and Affected Versions Simple Student Result plugin versions prior to 1.6.4 Description The issue allows for an authentication bypass because the fn ssr add st submit and fn ssr del st submit functions in functions.php only require knowledge of the student id number...

CVE-2017-14600

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...

PT-2017-13572

Name of the Vulnerable Software and Affected Versions Pragyan CMS version 3.0 Description The issue concerns an Error-Based SQL injection, which can lead to Information Disclosure. This occurs in the cms/admin.lib.php file via the del black variable in the $ GET request. Recommendations For Pragy...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

vigiadelfuerte-antioquia.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-270174 Description| Value ---|--- Affected Website:| vigiadelfuerte-antioquia.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...