217 matches found
CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
CVE-2017-7377
The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...
fid-romanistik.de Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting fid-romanistik.de website and its users. Following...
DEBIAN-CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
Design/Logic Flaw
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
CVE-2018-19364
CVE-2018-19364 affects QEMU’s 9p file system components (hw/9pfs/cofile.c and hw/9pfs/9p.c). The issue arises when a fid path is modified while another thread is still accessing it, enabling a use-after-free condition. The description only states a use-after-free outcome as a consequence, with no...
CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
UBUNTU-CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
CVE-2018-19364
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...
School ERP Pro+Responsive 1.0 - 'fid' SQL Injection
Exploit Title: School ERP Pro+Responsive 1.0 - 'fid' SQL Injection Dork: N/A Date: 2018-10-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.arox.in/ Software Link: https://sourceforge.net/projects/school-management-system-php/files/latest/download Software Link: http://erp.arox.in/...
Navigate CMS Cross-Site Scripting Vulnerability
Navigate CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in the 'fid' parameter of the navigate.php file in Navigate CMS version 2.8, which can be exploited by remote attackers to inject arbitrary web script or HTML...
Navigate CMS 2.8 - Cross-Site Scripting
Title: Navigate CMS 2.8 - Cross-Site Scripting Author: Felipe "Renzi" Gabriel Date: 2018-09-19 Vendor: https://www.navigatecms.com/en/home Software: Navigate CMS 2.8 CVE: CVE-2018-17255 Technical Details & Description: A Reflected Cross-Site Scripting web vulnerability has been discovered in the...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00088)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
Sql injection
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
CVE-2017-17958
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the mywishlist.php fid parameter...
CVE-2017-17957
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the mywishlist.php fid parameter...
CVE-2017-17958
CVE-2017-17958 concerns PHP Scripts Mall’s PHP Multivendor Ecommerce platform, with a reported Cross-Site Scripting (XSS) vulnerability exploitable via the my_wishlist.php parameter fid . The connected documents consistently identify XSS as the issue; no details on a specific exploit vector, affe...
FS Linkedin Clone SQL Injection Vulnerability
FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...