Lucene search
K

8 matches found

OSV
OSV
added 2023/08/29 12:32 a.m.14 views

GHSA-J6MP-HX4G-P3GM Command injection in pagekit

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

7.8CVSS7.8AI score0.01046EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2023/08/29 12:32 a.m.16 views

Command injection in pagekit

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

7.8CVSS8AI score0.01046EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/08/28 10:15 p.m.2 views

CVE-2023-41005

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

7.8CVSS6.2AI score0.01046EPSS
Exploits1References2
NVD
NVD
added 2023/08/28 10:15 p.m.7 views

CVE-2023-41005

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

7.8CVSS7.9AI score0.01046EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/28 12:0 a.m.12 views

CVE-2023-41005

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

8.1AI score0.01046EPSS
Exploits1References1
OSV
OSV
added 2022/09/13 10:15 p.m.2 views

CVE-2022-31324

An arbitrary file download vulnerability in the downloadAction function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request...

6.5CVSS5.9AI score0.0029EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/13 12:0 a.m.1 views

Penta Security Systems WAPPLES 安全漏洞

Penta Security Systems WAPPLES is a logical Web application firewall from Penta Security Systems, India. A security vulnerability in Penta Security Systems WAPPLES v6.0 r3 version 4.10-hotfix1, which originates from an arbitrary file download vulnerability in the downloadAction function, allows a...

6.5CVSS6.7AI score0.0029EPSS
Exploits0References3
Check Point Advisories
Check Point Advisories
added 2018/12/09 12:0 a.m.3 views

Advantech WebAccess NMS DownloadAction Directory Traversal (CVE-2018-7503)

A directory traversal vulnerability exists in Advantech WebAccess NMS. The vulnerability is due to insufficient input validation on file paths in the DownloadAction servlet...

5CVSS7.5AI score0.01713EPSS
Exploits0
Rows per page
Query Builder