458 matches found
CVE-2022-36226
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx...
CVE-2022-36226
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx...
Information disclosure
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx...
CVE-2022-36226
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx...
CVE-2022-36226
SiteServerCMS 5.X is affected by a Remote-download-Getshell vulnerability exploitable through the /SiteServer/Ajax/ajaxOtherService.aspx API endpoint. The issue is associated with a remote download that can lead to arbitrary code execution on the server, with the CVE-2022-36226 entry reflecting a...
CVE-2021-36461
An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini...
CVE-2021-36461: Unrestricted Upload of File with Dangerous Type
An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section by uploading pictures with malicious code, user.ini...
CVE-2022-32411
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32411
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
Denial of service
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32412
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32411
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
CVE-2022-32411
The CVE-2022-32411 issue affects HongCMS v3.0, arising from a flaw in the languages configuration file that can allow an attacker to obtain a shell. The available connected documents consistently associate this vulnerability with HongCMS v3.0 and describe the impact as shell access, but they do n...
CVE-2022-32412: Undefined Security Weakness
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell...
PT-2022-21307
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0 Description An issue in the "/template/edit" component allows attackers to getshell. Recommendations For HongCMS version 3.0, as a temporary workaround, consider disabling access to the "/template/edit" component until a...
PT-2022-21306
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0 Description An issue in the languages config file allows attackers to getshell. Recommendations For HongCMS version 3.0, consider restricting access to the languages config file until a patch is available...