53 matches found
CVE-2017-18439
cPanel before 64.0.21 allows demo accounts to execute code via an ImageManagerdimensions API call SEC-243...
EUVD-2006-3745
Malware in sbrugna...
EUVD-2017-9555
Malware in sbrugna...
in flarum/framework
✍️ Description Avatar URL from OAuth registration is passed to Intervention Image's ImageManager::make function without any validation on URL. Since ImageManager::make allows relative path to read file, it is possible to inject arbitrary inputs like storage/somefile.jpg or even absolute paths like...
Cross site scripting
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1135
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1135
Removed by vendor...
CVE-2011-1135: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
PT-2019-6617
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.5.5 Xinha affected versions not specified Description The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting XSS flaw in Xinha, which is included in the Serendipity...
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: Dokeos 1.8.6.3 and 1.8.6.1- Arbitrary File Upload Google Dork: "Plateforme Dokeos 1.8.6.3 " or 1.8.6.1 Exploit Author: Sohel Yousef Jellyfish security team Vendor Homepage: https://www.dokeos.com/ Software Link:...
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload
Exploit Title: Dokeos 1.8.6.3 and 1.8.6.1- Arbitrary File Upload Google Dork: "Plateforme Dokeos 1.8.6.3 " or 1.8.6.1 Date: 17/09/2019 Exploit Author: Sohel Yousef Jellyfish security team Vendor Homepage: https://www.dokeos.com/ Software Link: https://www.dokeos.com/ Version: 1.8.6.3 - 1.8.6.1...
PT-2019-8374
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows demo accounts to execute code via an "ImageManager dimensions" API call. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...
CVE-2017-12139
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...
CVE-2017-12139
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php...
CVE-2017-11723
Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via directory traversal sequences in the deld parameter...
CVE-2017-11723
CVE-2017-11723 affects Xinha 0.96 (as used in Jojo 4.4.0) via the plugins/ImageManager/backend.php component. The underlying issue is a directory traversal vulnerability in the deld parameter, which allows a remote attacker to delete arbitrary folders. No exploitation details are provided in the ...
CVE-2017-11723
Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via directory traversal sequences in the deld parameter...
CVE-2017-11723
Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via directory traversal sequences in the deld parameter...
PT-2017-12201
Name of the Vulnerable Software and Affected Versions Xinha version 0.96 Jojo version 4.4.0 Description A directory traversal issue exists, allowing remote attackers to delete any folder using directory traversal sequences in the deld parameter. This issue is related to the...
