685 matches found
CVE-2020-20392
SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...
CVE-2020-20392
CVE-2020-20392 affects the imcat web app (v5.2). The vulnerability is a SQL injection via the fm[auser] parameter in coms/add_coms.php. Public sources describe the issue and its high/critical impact (CVSS v3.1: 9.8; v2: 7.5), but the connected documents do not provide concrete fixes, affected bui...
Imcat SQL注入漏洞
imcat intimate cat is a lightweight, free, shared general-purpose PHP web application. A SQL injection vulnerability exists in imcat version 5.2. An attacker can exploit this vulnerability by using the fmauser parameter in coms/addcoms.php to perform a SQL injection attack...
PT-2021-10488
Name of the Vulnerable Software and Affected Versions: imcat version 5.2 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the fmauser parameters in the "coms/add coms.php" API endpoint. Recommendations: For imcat version 5.2, consider restricting access ...
CVE-2020-20392: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in imcat v5.2 via the fmauser parameters in coms/addcoms.php...
PT-2021-30924
Уязвимость файлового менеджера fly-fm связана с некорректным вычислением MD5 в окне программы. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2020-22897
Уязвимость файлового менеджера fly-fm связана с первым подключением сетевого место по sftp. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, получить доступ к конфиденциальным данным отказ в обслуживании...
fm-misch.de Cross Site Scripting vulnerability OBB-1410758
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fm-trade.de Cross Site Scripting vulnerability OBB-1326887
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fm-construction.de Cross Site Scripting vulnerability OBB-1323125
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FM...
The vulnerability of the fly-fm file manager arises due to an incorrect path name limitation for the restricted access catalog. This allows a malicious actor to gain unauthorized access to confidential data.
The vulnerability of the fly-fm file manager exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential data...
The vulnerability of the fly-fm file manager lies in the fact that resources are not released after their useful period has ended. This allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...
The vulnerability of the fly-fm file manager, related to errors in saving permissions, allows a violator to gain access to confidential data.
The vulnerability of the fly-fm file manager is related to errors during permission saving. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the fly-fm file manager is related to an error in data processing through drag-and-drop, which allows a malicious actor to cause a service failure.
The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...
PT-2020-22861
Уязвимость менеджера файлов fly-fm связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным и нарушить их целостность...
PT-2020-22853
Уязвимость менеджера файлов fly-fm существует из-за неверного ограничения имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к конфиденциальным данным...
adv-fm-tableau.eservices.virginia.edu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1149156 Security Researcher OakdaleHutch Helped patch 26 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting adv-fm-tableau.eservices.virginia.edu website and i...
PT-2020-22858
Уязвимость менеджера файлов fly-fm связана с ошибками при сохранении разрешений. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...
PT-2020-22856
Уязвимость менеджера файлов fly-fm связана с ошибкой при обработке данных через способ drag-and-drop для оперирования элементами интерфейса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...