65 matches found
Palantir Security Breach
Palantir is a data platform from US-based Palantir that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A security vulnerability exists in Palantir Gotham that stems from the presence of a front-end UI error that causes newly...
GHSA-377V-8637-6VQ6 TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors...
Missing Authorization
Overview in2code/femanager is a Modern TYPO3 Frontend User Registration. Affected versions of this package are vulnerable to Missing Authorization via unspecified vectors. An attacker can modify or delete the records of other frontend users by exploiting these vectors. Remediation Upgrade...
GHSA-RJRQ-93HP-22WW Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...
Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...
Privilege Escalation in extension "femanager direct mail subscription" (femanager_dmail_subscribe)
Failing to properly check access rights, the extension is susceptible to privilege escalation, making it possible for a logged in frontend user to modify other frontend user records...
XSS vulnerability in X5music V2.0 frontend user folder do.php
X5music Music Management System is a music management system and video management system compiled with php+mysql. X5music V2.0 has an XSS vulnerability in the front user folder do.php, which can be exploited by attackers to obtain cookie information...
CVE-2019-16698
The CVE-2019-16698 issue affects the TYPO3 Direct Mail extension (direct_mail) up to version 5.2.2. A missing access check in the backend module allows a user with restricted permissions (to fe_users) to view and export data of frontend newsletter subscribers. The condition is an information-disc...
XSS Vulnerability in anyoucms Frontend User Messages
anyoucms is a website building system. An XSS vulnerability exists in anyoucms front-end user comments, which can be exploited by attackers to execute script code...
Jfinal cms xss vulnerability at frontend user profile
Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...
TYPO3 Frontend User Registration Remote Command Execution Vulnerability
TYPO3 is a free and open source content management system. A remote command execution vulnerability exists in TYPO3 Frontend User Registration. A remote attacker could exploit the vulnerability to execute arbitrary code within the context of the application. A successful attack would corrupt the...
Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)
Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type: Arbitrary Code Execution Severity: High Suggested CVSS v2.0:...
TYPO3 Frontend User Upload Arbitrary File Upload Vulnerability
TYPO3 is a free and open source content management system, Frontend User Upload is a frontend user upload extension plugin. TYPO3 Frontend User Upload has an arbitrary file upload vulnerability that allows remote attackers to exploit the vulnerability to submit a special file and execute it with...
CVE-2015-4607
Unrestricted file upload vulnerability in the Frontend User Upload feupload extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the...
Arbitrary Code Execution in extension Frontend User Upload (feupload)
It has been discovered that the extension "Frontend User Upload" feupload is susceptible to Arbitrary Code Execution Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.5.0 and below...
phpwcms <= 1.5.4.6 "preg_replace" - Multiple Vulnerabilities
No description provided by source. ?php / phpwcms = v1.5.4.6 pregreplace remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite some time now. Here I...
phpwcms <= v1.5.4.6 "preg_replace" Multiple Vulnerabilities
Exploit for php platform in category web applications ?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite...
PHPWCMS 1.5.4.6 - preg_replace Multiple Vulnerabilities
PHPWCMS 1.5.4.6 - pregreplace Multiple Vulnerabilities ?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite...
PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities
?php / phpwcms = v1.5.4.6 "pregreplace" remote code execution exploit vendor: http://www.phpwcms.de/ Download: github.com/slackero/phpwcms by: aeon Well it appears there are multiple remote code execution bugs that exists in phpwcms for quite some time now. Here I will exploit one of them, but ma...
