29 matches found
CVE-2024-25513
CVE-2024-25513 affects RuvarOA v6.01 and v12.01, with a SQL injection vulnerability exploitable through the file_id parameter of /CorporateCulture/kaizen_download.aspx. The issue arises from lack of input validation on external SQL input, enabling an attacker to execute arbitrary SQL commands and...
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
CVE-2024-25513
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the fileid parameter at /CorporateCulture/kaizendownload.aspx...
Concrete CMS: Stored XSS in adding fileset
Hello I found XSS and CSRF in Concrete5 5.7.3 Adding fileset function have CSRF vuln so I think easy to attack. PoC is below 1.Upload one file in file manager /conc/index.php/dashboard/files 2.Open the page like this ---------------------...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
CVE-2014-3837
The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...
Server: Enumeration of shared files in documents
Due to using the auto-incrementing fileid instead of the random generated token to access files in the documents app an authenticated users could enumerate shared files of other users. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
U-Mail任意文件上传漏洞一枚
简要描述： U-Mail存一处任意文件上传漏洞。 详细说明： 先登录官方测试站点： 这里登录的账号为：mailtest3721 再获取当前登录用户的userid http://mail.comingchina.com/webmail/client/oab/index.php?module=operate&action=member-get&page=1&orderby=&isreverse=1&keyword=mailtest3721 这里mailtest3721对应的userid为:78609 html exp: 上传文件： 上传后获取"fileid":"13995534500" im...