CVE-2021-39314

The WooCommerce EnvioPack WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dataid parameter found in the /includes/functions.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WooCommerce EnvioPack plugin is a WordPress open source application plugin.The WordPress WooCommerce EnvioPack plugin h...

CVE-2021-44965

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

CVE-2021-44965

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

PT-2021-24186 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Employee Record Management System version 1.2 Description: The issue allows an attacker to perform a directory traversal attack in the /admin/includes/ directory. This enables the retrieval and download of sensitive information fro...

CVE-2021-44965: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in /admin/includes/ directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and download sensitive information from the vulnerable server...

PHPGURUKUL Employee Record Management System 路径遍历漏洞

Employee Record Management System is an employee record management system. Employee Record Management System has a directory traversal vulnerability that originates from a directory traversal vulnerability in the admin/includes/ file, which can be exploited by an attacker to retrieve and download...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

PT-2021-24077

Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is related to a path manipulation vulnerability. It affects the includes/html/pages/device/showconfig.inc.php file. Recommendations: For Librenms version 21.11.0, at the moment, there is no...

CVE-2021-44278: Improper Limitation of a Pathname to a Restricted Directory

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44277

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

CVE-2021-44279

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...

OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal

The plugin does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin PoC As admin, put the following payload in the "Fonts Cache Directory" setting of the plugin: ../wp-includes, tick the...

PT-2021-24076

Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is a Cross Site Scripting XSS vulnerability located in includes/html/common/alert-log.inc.php. Recommendations: For version 21.11.0, consider restricting access to the...

PT-2021-24078

Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is a Cross Site Scripting XSS vulnerability located in the includes/html/forms/poller-groups.inc.php file. Recommendations: For Librenms version 21.11.0, at the moment, there is no information...

CVE-2021-44277: Improper Neutralization of Input During Web Page Generation

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/common/alert-log.inc.php...

CVE-2021-44279: Improper Neutralization of Input During Web Page Generation

Librenms 21.11.0 is affected by a Cross Site Scripting XSS vulnerability in includes/html/forms/poller-groups.inc.php...