443 matches found
CVE-2023-42387
An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...
CVE-2023-42387: Exposure of Sensitive Information to an Unauthorized Actor
An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...
CVE-2023-5013 Pluck CMS Installation install.php cross site scripting
A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input alert'xss' leads to cross site scripting. The attack ca...
CVE-2023-5013
A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input alert'xss' leads to cross site scripting. The attack ca...
PT-2023-31480 · Pluck Cms · Pluck Cms
Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.18 Description: A problematic issue has been identified, affecting the install.php file of the Installation Handler component. The manipulation of the contents argument with the input alert'xss' leads to cross-site...
CVE-2023-5013: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input leads to cross site scripting. The attack can be...
haraj 1.1 Add Administrator
==================================================================================================================================== | Title : haraj V1.1 Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit | | Vendor :...
CVE-2023-38947
An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-38947: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file...
Advanced Testimonials Manager 5.5 Add Administrator
==================================================================================================================================== | Title : Advanced Testimonials Manager v5.5 Reinstall Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
CVE-2023-29855: Improper Neutralization of Special Elements used in a Command
WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php...
CVE-2023-29855
WBCE CMS 1.5.3 is affected by a command execution vulnerability in the admin/languages/install.php endpoint. The issue arises from a poorly filtered parameter in the Language Install module, enabling potential arbitrary command execution. Relevant advisories reference this exact vector across mul...
CVE-2023-29855
WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php...
CVE-2023-24114
typecho 1.1/17.10.30 was discovered to contain a remote code execution RCE vulnerability via install.php...
CVE-2023-24114
typecho 1.1/17.10.30 was discovered to contain a remote code execution RCE vulnerability via install.php...
CVE-2023-24114
Typecho 1.1/17.10.30 is affected by CVE-2023-24114, a remote code execution (RCE) vulnerability via install.php. The vulnerability triggers a high-severity impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with full confidentiality, integrity, and availability impact reported. Exploitation d...
CVE-2023-24114
typecho 1.1/17.10.30 was discovered to contain a remote code execution RCE vulnerability via install.php...
CVE-2023-24114
typecho 1.1/17.10.30 was discovered to contain a remote code execution RCE vulnerability via install.php...
