13402 matches found
CVE-2020-22937: Improper Control of Generation of Code
A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...
CVE-2020-18164: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...
CVE-2021-38758
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
CVE-2021-38758
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
Directory traversal
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
CVE-2021-38758
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
CVE-2021-38758
CVE-2021-38758 affects the Online Catering Reservation System 1.0. The vulnerability is a directory traversal due to lack of validation in index.php, allowing access to restricted files as described in the CVE entry. NVD lists CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, No u...
CVE-2021-34657: Improper Neutralization of Input During Web Page Generation
The 2TypoFR WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the text function found in the /vendor/OrgHeigl/Hyphenator/index.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.11...
Nagios XI file inclusion vulnerability
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A local file inclusion vulnerability exists in versions of Nagios XI prior to 5.8.5. The vulnerability stems from an improper...
PT-2021-22287
Name of the Vulnerable Software and Affected Versions Online Catering Reservation System version 1.0 Description The issue is related to a directory traversal vulnerability due to a lack of validation in the index.php file. This allows for potential unauthorized access to sensitive files and...
CVE-2021-38758: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
PT-2021-20625
Name of the Vulnerable Software and Affected Versions: 2TypoFR WordPress plugin versions up to and including 0.11 Description: The issue allows attackers to inject arbitrary web scripts via the text function found in the /vendor/Org Heigl/Hyphenator/index.php file, enabling Reflected Cross-Site...
CVE-2021-37348
Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php...
CVE-2021-37348
Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php...
CVE-2021-37348: Files or Directories Accessible to External Parties
Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php...
TypoFR <= 0.11 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the text function found in the /vendor/OrgHeigl/Hyphenator/index.php file which allows attackers to inject arbitrary web scripts...
PT-2021-4127
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.5 Description The issue is related to a local file inclusion vulnerability through improper limitation of a pathname in index.php. This could allow a remote attacker to disclose protected information. The...
Nagios XI 输入验证错误漏洞
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A local file inclusion vulnerability exists in versions of Nagios XI prior to 5.8.5. The vulnerability stems from an improper...
CVE-2021-31731
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter...