CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

EUVD-2018-11147

Malware in sbrugna...

EUVD-2005-3933

Malware in sbrugna...

EUVD-2008-6492

Malware in sbrugna...

EUVD-2017-7404

Malware in sbrugna...

EUVD-2023-44191

Malicious code in bioql PyPI...

CVE-2023-3535

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

Cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

CVE-2023-3535

The CVE-2023-3535 issue affects SimplePHPscripts FAQ Script PHP 2.3, where the vulnerability exists in the /preview.php file of the URL Parameter Handler. Argument manipulation can trigger cross-site scripting (XSS) and can be exploited remotely over the network. The connected sources consistentl...

CVE-2023-3535 SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

CVE-2023-3535 SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

CVE-2023-3535: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

FAQ Script 2.3 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Command injection

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457

CVE-2018-19457 affects Logicspice FAQ Script 2.9.7, where an attacker can upload arbitrary files to admin/faqs/faqimages and achieve remote command execution via a crafted .php file. Public references (e.g., Exploit-DB) indicate exploit availability. NVD metrics show CVSSv2 6.5 (MEDIUM) and CVSSv...

CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457: Unrestricted Upload of File with Dangerous Type

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

PT-2018-14965

Name of the Vulnerable Software and Affected Versions Logicspice FAQ Script version 2.9.7 Description The issue allows uploading arbitrary files, leading to remote command execution. This can be achieved via the "admin/faqs/faqimages" endpoint with a .php file. Recommendations For version 2.9.7,...

Logicspice FAQ Script 2.9.7 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link:...