PT-2023-27948

Name of the Vulnerable Software and Affected Versions phpkobo AjaxNewTicker version 1.0.5 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the "index.php" component. This enables the attacker to perform unauthorized actions on th...

PT-2023-27956

Name of the Vulnerable Software and Affected Versions phpkobo AjaxNewTicker version 1.0.5 Description A Cross Site Request Forgery vulnerability allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the "index.php" component. Recommendations For phpkobo...

CVE-2023-41448: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

phpkobo AjaxNewTicker Cross-Site Scripting Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A security vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which originates from a cross-site scripting XSS vulnerability in the file index.php...

CVE-2023-41453: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component...

CVE-2023-41452: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

CVE-2023-41451: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

CVE-2023-5221: Improper Control of Generation of Code

A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/index.php. The manipulation of the argument dbname leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2023-41445: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component...

CVE-2021-38243

xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...

PT-2023-12334 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: xunruicms versions up to 4.5.1 Description: The issue allows attackers to execute arbitrary code via a crafted GET request to the /index.php endpoint. This enables the execution of arbitrary code, posing a significant risk. Recommendations: F...

CVE-2021-38243: Improper Control of Generation of Code

xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

PT-2023-29079

Name of the Vulnerable Software and Affected Versions Black Cat CMS version 1.4.1 Description A stored cross-site scripting XSS issue in the /settings/index.php endpoint of Black Cat CMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website head...

CVE-2023-3767: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...

CVE-2023-44043: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

CVE-2023-44042

A stored cross-site scripting XSS vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter...

CVE-2023-44042: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter...

CVE-2021-38243

xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...

Super Store Finder 3.7 Remote Command Execution Vulnerability

Vulnerability : Authenticated Arbitrary PHP Code Injection lead to Remote Code Execution Researcher : Etharus Vendor : Joe Iz, https://www.superstorefinder.net/ Demo Url : https://superstorefinder.net/products/superstorefinder/ Version Affected : 3.7 and below Date : 18 September 2023 FOFA Dork :...