PT-2019-19760

Name of the Vulnerable Software and Affected Versions Feng Office version 3.7.0.5 Description The issue allows remote attackers to execute arbitrary code. This can be achieved by using "!--exec cmd=" in a .shtml file to access the ck upload handler.php API endpoint. Recommendations For Feng Offic...

PT-2018-9836

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.x Description: A SQL injection remote code execution issue exists due to a flaw in the handling of parameters provided to the wcs bwlists handler.php file. This could allow a remote...

PT-2018-9959

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.4.13 Description: An issue was discovered in Nagios XI, allowing for XSS exploitation via CSRF. This can occur through various means, including the Schedule New Report screen via the hour, minute, or ampm parameter, the...

PT-2017-12589

Name of the Vulnerable Software and Affected Versions SLiMS versions 8 Akasia through 8.3.1 Description The issue allows for SQL injection through specific parameters and files, including tableName and tableFields in admin/AJAX lookup handler.php, as well as vulnerabilities in admin/AJAX check...

hope.edu XSS vulnerability

Vulnerable URL: http://www.hope.edu/resources/php/localist/Localist-handler.php?items=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=true=event-list-append=2016-04-16=true=2016-12-31=2016-12-31=365=2 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:|...

PT-2014-8489

Name of the Vulnerable Software and Affected Versions WordPress Spreadsheet wpSS plugin version 0.62 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the ss id parameter in the ss handler.php file. Recommendations For...

PT-2014-8488

Name of the Vulnerable Software and Affected Versions WordPress Spreadsheet wpSS plugin version 0.62 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ss id parameter in the ss handler.php file. Recommendations For WordPress Spreadsheet wpSS...

WordPress reganto-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress reganto-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/reganto/ Infected File:...

WordPress rayoflight-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress rayoflight-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/ray-of-light/ Infected File...

WordPress Anthology Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Anthology Themes Remote File Upload Vulnerability Author: Byakuya...

PT-2012-5966

Name of the Vulnerable Software and Affected Versions WebCalendar affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected variables include...

PT-2011-4057

Name of the Vulnerable Software and Affected Versions Chyrp versions 2.0 and earlier Description The issue allows remote authenticated users to upload a .php file and execute arbitrary PHP code via a write post action to the default URI under admin/. This is possible because the upload handler.ph...