Lucene search
+L

9 matches found

NVD
NVD
added 2026/07/27 3:17 p.m.12 views

CVE-2026-65436

Editor Arbitrary File Deletion in Kirki = 6.0.13 versions...

6.8CVSS0.00325EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/25 12:0 a.m.5 views

ChurchCRM UserEditor.php File SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the type parameter of the src/UserEditor.php file. No details of the vulnerability are provided at this time...

7.2CVSS5.9AI score0.00359EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/04 10:51 p.m.10 views

CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes ./.cursor/./././././mcp.json etc., and requires human approval to complete the operation. However, the same kin...

8.8CVSS5.8AI score0.00357EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 3:50 p.m.11 views

CVE-2020-13894

handler/uploadhandler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field...

7.5CVSS7AI score0.01104EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/07/25 12:0 a.m.7 views

Pligg CMS 代码问题漏洞

Pligg CMS is a content management system by Berteh Personal Developers. A security vulnerability exists in Pligg CMS version 2.0.2, which stems from a remote code execution RCE vulnerability in the file admineditor.php...

9.8CVSS9.1AI score0.013EPSS
SaveExploits1References2
OSV
OSV
added 2019/01/30 9:29 p.m.3 views

CVE-2019-7236

An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal...

7.5CVSS7.1AI score0.02247EPSS
SaveExploits1References1
OSV
OSV
added 2017/07/18 5:29 a.m.6 views

CVE-2017-11419

Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...

9.8CVSS5.8AI score0.00986EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/18 12:0 a.m.8 views

Fiyo CMS SQL Injection Vulnerability (CNVD-2017-23890)

Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the /apps/apparticle/controller/editor.php file in Fiyo CMS version 2.0.7. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of $POST'id'...

9.8CVSS10AI score0.00986EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2007/03/10 12:0 a.m.44 views

wwwpaintboar(newsfile) Remote File Inclusion Vulnerability

wwwpaintboarnewsfile Remote File Inclusion Vulnerability ----------------------------------------------------------- Version : 1.0 Website URL: http://phpforge.oirac.com/ ----------------------------------------------------------- Discoved by sawxyz sasan XIII Security Researcher Gr33tZ t0 :Snake...

1.2AI score
SaveExploits0
Rows per page
Query Builder