Lucene search
K

28 matches found

CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager Arbitrary Directory Deletion Vulnerability

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A security vulnerability exists in the 'deletefolder' function of the execute.php file in version 9.13.4...

7.5CVSS7.2AI score0.00634EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12898)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'deletefile' function of the execute.php file in version...

7.5CVSS7.1AI score0.00634EPSS
Exploits1References1
NVD
NVD
added 2015/01/05 8:59 p.m.9 views

CVE-2014-9520

SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands via the historyID parameter...

7.5CVSS8.4AI score0.00314EPSS
Exploits0References2
Prion
Prion
added 2015/01/05 8:59 p.m.12 views

Sql injection

SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands via the historyID parameter...

7.5CVSS9.1AI score0.00314EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2015/01/05 8:0 p.m.38 views

CVE-2014-9520

CVE-2014-9520 affects InfiniteWP Admin Panel prior to 2.4.4, with a SQL injection in execute.php via the historyID parameter that could allow remote attackers to execute arbitrary SQL commands. This is the stated vulnerability in multiple sources; no exploit details are provided in the documents....

7.5CVSS8.7AI score0.00314EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2015/01/05 8:0 p.m.13 views

CVE-2014-9520

SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands via the historyID parameter...

8.4AI score0.00314EPSS
Exploits0References2
Cvelist
Cvelist
added 2008/02/28 7:0 p.m.16 views

CVE-2008-1060

Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter...

7.9AI score0.14869EPSS
Exploits2References6
Patchstack
Patchstack
added 2008/02/28 12:0 a.m.17 views

WordPress Sniplets Plugin <= 1.2.2 - Eval Injection

Because of this vulnerability in modules/execute.php, the attackers can execute arbitrary PHP code via the "text" parameter. Solution Update the plugin...

7.5CVSS6.1AI score0.14869EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder