Lucene search
+L

3387 matches found

n0where
n0where
added 2018/05/31 6:56 p.m.65 views

File System Crawler: diskover

diskover is an open source file system crawler and disk space usage software that uses Elasticsearch to index and manage data across heterogeneous storage systems. Using diskover, you are able to more effectively search and organize files and system administrators are able to manage storage...

SaveExploits0References4
Circl
Circl
added 2018/05/29 3:50 p.m.10 views

CVE-2017-1000002

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/atutorfilemanagertraversal.rb 2026-09-08 06:48:23+00:00| seen|...

9.8CVSS5.8AI score0.30833EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/15 1:29 a.m.13 views

CVE-2018-11098

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/filemanager/upload URI, a similar issue to CVE-2014-4912...

7.2CVSS5.8AI score0.01417EPSS
SaveExploits1References1
OSV
OSV
added 2018/05/08 7:29 a.m.7 views

CVE-2018-10806

An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the filecurrentname parameter to the admin/?/plugin/filemanager/rename URI. This can be used in conjunction with CSRF...

5.4CVSS5.7AI score0.00333EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/05/08 12:00 a.m.17 views

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-09306)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit thi...

5.4CVSS6.1AI score0.00333EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/04/28 12:00 a.m.14 views

CMS Made Simple Physical Path Disclosure Vulnerability (CNVD-2018-09058)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS 2.2.7 and...

5.3CVSS6.6AI score0.01147EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/27 6:29 p.m.8 views

CVE-2018-10523

CMS Made Simple CMSMS through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajaxgettemplates.php, /modules/DesignManager/action.ajaxgetstylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php...

5.3CVSS5.8AI score0.01147EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/04/19 12:00 a.m.8 views

Frog CMS Cross-Site Scripting Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

4.8CVSS6.3AI score0.00526EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/04/19 12:00 a.m.10 views

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08549)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

4.8CVSS6.3AI score0.00526EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2018/04/16 9:58 a.m.2 views

CVE-2014-2069

Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx...

7.5CVSS5.8AI score0.15723EPSS
SaveExploits2References4
OSV
OSV
added 2018/04/11 6:29 a.m.11 views

CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

4.8CVSS5.8AI score0.00526EPSS
SaveExploits1References1
Prion
Prion
added 2018/04/11 6:29 a.m.22 views

Arbitrary file deletion

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

3.5CVSS4.9AI score0.00526EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/04/11 6:00 a.m.27 views

CVE-2018-9992

Frog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin/filemanager/browse/ screen...

5AI score0.00526EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/13 1:29 a.m.9 views

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

7.2CVSS6AI score0.38802EPSS
SaveExploits8References2
NVD
NVD
added 2018/03/13 1:29 a.m.28 views

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

7.2CVSS7.3AI score0.38802EPSS
SaveExploits8References2
Prion
Prion
added 2018/03/13 1:29 a.m.14 views

Remote code execution

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

6.5CVSS7.2AI score0.38802EPSS
SaveExploits8References2Affected Software1
Cvelist
Cvelist
added 2018/03/13 1:00 a.m.38 views

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

7.3AI score0.38802EPSS
SaveExploits8References2
CVE
CVE
added 2018/03/13 1:00 a.m.95 views

CVE-2018-1000094

CVE-2018-1000094 affects CMS Made Simple 2.2.5. The vulnerability is a remote code execution via the File Manager, exploitable by an authenticated administrator who can upload a file and copy/rename it to a PHP extension, enabling execution of arbitrary code on the server (e.g., via a PHP shell)....

7.2CVSS7.2AI score0.38802EPSS
SaveExploits8References2Affected Software1
CNVD
CNVD
added 2018/03/13 12:00 a.m.11 views

CMS Made Simple Remote Code Execution Vulnerability (CNVD-2018-06398)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism , etc. File Manager is one of the file management component ....

7.2CVSS8.4AI score0.38802EPSS
SaveExploits8References1
OSV
OSV
added 2018/03/07 8:29 p.m.11 views

CVE-2018-7204

inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is not protected and...

7.5CVSS5.8AI score0.02774EPSS
SaveExploits1References3
Rows per page
Query Builder