CVE-2020-26042

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...

CVE-2020-26042

CVE-2020-26042 affects Hoosk CMS v1.8.0 with a SQL injection vulnerability in install/index.php. Per the connected NVD record, the issue yields partial confidentiality, partial integrity, and partial availability impacts (CVSS v2 base 7.5, HIGH; CVSS v3.1 base 9.8, CRITICAL). Exploitation details...

CVE-2020-26041

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...

CVE-2020-26041: Undefined Security Weakness

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...

CVE-2020-26042: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...

CVE-2020-26043: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...

PT-2020-16273

Name of the Vulnerable Software and Affected Versions Hoosk CmS version 1.8.0 Description An issue was discovered in Hoosk CmS, which allows for Remote Code Execution. The vulnerability is located in the install/index.php file. Recommendations For Hoosk CmS version 1.8.0, consider removing or...

PT-2020-16274

Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A SQL injection issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...

CVE-2020-20800: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI...

PT-2020-16275

Name of the Vulnerable Software and Affected Versions Hoosk CMS version 1.8.0 Description A cross-site scripting XSS issue was found in the install/index.php file. Recommendations For Hoosk CMS version 1.8.0, update to a newer version that contains a fix for this issue...

PT-2020-15286

Name of the Vulnerable Software and Affected Versions MetInfo version 7.0.0 beta Description An issue was discovered that allows SQL Injection via the "install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes" URI. Recommendations For MetInfo version 7.0.0 beta, at the moment, there...

PT-2020-6081

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.4.10 and earlier Description A stored cross-site scripting XSS vulnerability was discovered in BigTree CMS, which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to...

CVE-2020-12282

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12281

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

CVE-2020-12840: Cross-Site Request Forgery (CSRF)

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-12282: Cross-Site Request Forgery (CSRF)

iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. This can be combined with reflected XSS...

CVE-2020-12841: Cross-Site Request Forgery (CSRF)

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php...

PT-2020-13092

Name of the Vulnerable Software and Affected Versions iSmartgate PRO version 1.5.9 Description The issue allows remote attackers to create a new user via the "/index.php" API endpoint. This is achieved through a CSRF attack. Recommendations For iSmartgate PRO version 1.5.9, consider implementing...

CVE-2020-12281: Cross-Site Request Forgery (CSRF)

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...

PT-2020-13093

Name of the Vulnerable Software and Affected Versions iSmartgate PRO version 1.5.9 Description The issue concerns a CSRF vulnerability that can be exploited via the busca parameter in the form used for searching for users, accessible through the "/index.php" API endpoint. This vulnerability can b...