254 matches found
CVE-2026-117566
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
EUVD-2026-110844
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
CVE-2026-117566
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
CVE-2026-117566
EasyImages versions 2.0 through 2.8.6 are vulnerable to an unauthenticated path traversal vulnerability in the app/down.php , app/thumb.php , and app/info.php components. The root cause is the improper limitation of pathnames, where attackers can supply ../ sequences in the dw , history , or img ...
icret EasyImages path traversal vulnerability
icret EasyImages versions 2.8.6 and earlier contain a path traversal vulnerability. This vulnerability stems from unvalidated path traversal in app/down.php, app/thumb.php, and app/info.php. Attackers can exploit this by providing ../ sequences in the dw, history, or img parameters, thereby readi...
PT-2026-126425
EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...
PT-2026-106041
A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient info.php. Performing a manipulation of the argument patient id results in sql injection. The attack is possible to be carried out remotel...
VulnCheck KEV: CVE-2018-10736
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter...
OEcms 3.1 - Cross-Site Scripting Detection
OEcms 3.1 is vulnerable to reflected cross-site scripting via the mod parameter of info.php. !/usr/bin/env python3 -- coding: utf-8 -- """OEcms 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OEcms 3.1 - Cross-Sit...
D-Link DIR-816L 2.x - Cross-Site Scripting Detection
D-Link DIR-816L devices 2.x before 1.10b04Beta02 contains a cross-site scripting vulnerability. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter before being printed on the webpage. An attacker can inject arbitrary script in the browser of an unsuspecting us...
PT-2026-51519
DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is in End Of Life phase and will not receive any updates. However, deleting info.php fi...
EUVD-2005-3645
Malware in sbrugna...
EUVD-2018-2186
Malware in sbrugna...
EUVD-2014-3768
Malware in sbrugna...
EUVD-2010-4938
Malware in sbrugna...