Halo 代码问题漏洞

Halo is a powerful and easy-to-use open-source website building tool developed by Halo. Version 2.22.14 of Halo has a code vulnerability. This vulnerability stems from server-side request forgery at the /plugins/-/install-from-uri endpoint, which may allow authenticated attackers to scan internal...

EUVD-2018-13165

Malware in sbrugna...

EUVD-2018-13003

Malware in sbrugna...

CVE-2018-20602

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

Shopware 跨站脚本漏洞

Shopware is a set of open source e-commerce software from German Shopware company . A security vulnerability exists in Shopware v5.5.10, which can be exploited by an attacker to conduct cross-site scripting XSS attacks via URI recovery/install/...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

CVE-2022-48150: Improper Neutralization of Input During Web Page Generation

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

CVE-2019-16655

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

Authentication flaw

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

CVE-2019-16655

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

PT-2019-14740

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue allows for reinstallation if the install/ URI remains available. Recommendations For joyplus-cms version 1.6.0, restrict access to the install/ URI to prevent reinstallation...

CVE-2019-16655: Undefined Security Weakness

joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...

Design/Logic Flaw

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...

CVE-2018-19220: Improper Control of Generation of Code

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI...

PT-2018-14873

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue allows remote attackers to execute arbitrary PHP code via the host parameter to the "install/" URI. Recommendations For LAOBANCMS version 2.0, consider restricting access to the install/ URI to minimi...

Joyplus CMS Information Disclosure Vulnerability

Joyplus CMS is an efficient video movie website management system built with PHPmysql, independently developed by Zhi Jing Technology, which has been used as a backend management system for free products Joyplus Video, and after continuous improvement, it now has a complete functional system and...

Information disclosure

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

CVE-2008-2017: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the operation parameter to the default URI under install/...