Lucene search
+L

1297 matches found

Cvelist
Cvelist
•added 2019/11/16 12:52 a.m.•41 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

10AI score0.02327EPSS
SaveExploits0References5
CVE
CVE
•added 2019/11/16 12:52 a.m.•145 views

CVE-2019-19010

CVE-2019-19010 affects Limnoria (Limnoria/Math plugin) and Supybot, where eval injection in the Math plugin allows remote unauthenticated attackers to disclose information and potentially other impact via the calc and icalc commands. Affected versions include Limnoria before 2019.11.09 and Supybo...

9.8CVSS9.9AI score0.02327EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2019/11/16 12:52 a.m.•94 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS10AI score0.02327EPSS
SaveExploits0
Mend
Mend
•added 2019/11/16 12:52 a.m.•5 views

CVE-2019-19010

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS0.02327EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/16 12:00 a.m.•4 views

CVE-2019-19010: Improper Control of Generation of Code

Eval injection in the Math plugin of Limnoria before 2019.11.09 and Supybot through 2018-05-09 allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands...

9.8CVSS8.2AI score0.02327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/10/04 8:57 p.m.•29 views

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

6.8CVSS8.1AI score0.01968EPSS
SaveExploits0References3
NVD
NVD
•added 2019/08/22 7:15 p.m.•24 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.5CVSS7.8AI score0.01377EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/22 7:15 p.m.•18 views

Code injection

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

5CVSS7.8AI score0.01377EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/08/22 6:53 p.m.•2 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

8.7CVSS0.01377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/08/22 6:53 p.m.•31 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.8AI score0.01377EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/22 6:53 p.m.•64 views

CVE-2018-20988

CVE-2018-20988 affects the WordPress Google Forms (wpgform) plugin prior to 0.94. The issue is an eval injection in the CAPTCHA calculation, as described across multiple sources (NVD, Red Hat, CNVD, CVE list, etc.). The connected documents do not provide explicit exploitation details, affected pr...

7.5CVSS7.7AI score0.01377EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/22 12:00 a.m.•3 views

PT-2019-10425

Name of the Vulnerable Software and Affected Versions wpgform plugin versions prior to 0.94 Description The issue concerns eval injection in the CAPTCHA calculation of the wpgform plugin. Recommendations For versions prior to 0.94, update to version 0.94 or later to resolve the issue...

7.5CVSS0.01377EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/22 12:00 a.m.•6 views

CVE-2018-20988: Improper Control of Generation of Code

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.5CVSS5.8AI score0.01377EPSS
SaveExploits0References2
OSV
OSV
•added 2019/08/07 4:15 p.m.•18 views

CVE-2019-14746

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

9.8CVSS5.8AI score0.01212EPSS
SaveExploits1References1
NVD
NVD
•added 2019/08/07 4:15 p.m.•40 views

CVE-2019-14746

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

9.8CVSS9.7AI score0.01212EPSS
SaveExploits1References1
Prion
Prion
•added 2019/08/07 4:15 p.m.•31 views

Design/Logic Flaw

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

7.5CVSS9.5AI score0.01212EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/08/07 3:04 p.m.•43 views

CVE-2019-14746

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

9.7AI score0.01212EPSS
SaveExploits1References1
CVE
CVE
•added 2019/08/07 3:04 p.m.•75 views

CVE-2019-14746

CVE-2019-14746 affects KuaiFanCMS 5.0. The issue is an eval injection vulnerability: an attacker can place PHP code in the install.php db_name parameter and trigger it via a subsequent config.php request, enabling code execution as described. The connected documents confirm this vector and impact...

9.8CVSS9.5AI score0.01212EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/07 12:00 a.m.•5 views

PT-2019-13813

Name of the Vulnerable Software and Affected Versions KuaiFanCMS version 5.0 Description A issue was discovered that allows eval injection by placing PHP code in the db name parameter and then making a request to the "config.php" endpoint. Recommendations For KuaiFanCMS version 5.0, avoid using t...

9.8CVSS0.01212EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/07 12:00 a.m.•7 views

CVE-2019-14746: Improper Control of Generation of Code

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

9.8CVSS5.8AI score0.01212EPSS
SaveExploits1References2
Rows per page
Query Builder