CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

Privilege escalation

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

Webiness Inventory Arbitrary File Upload Vulnerability

Webiness Inventory is a set of PHP language development , Web-based inventory management system . A security vulnerability exists in the protected/library/ajax/WsSaveToModel.php file in Webiness Inventory version 2.3. A remote attacker can exploit this vulnerability to upload arbitrary files with...

Bakeshop Inventory System In VB.Net / MS Access Database 1.0 SQL Injection

Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Softwar...

Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection

Exploit Title: Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

CVE-2018-18752

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

CVE-2018-18752

Webiness Inventory 2.3 is affected by an Arbitrary File Upload vulnerability in the protected/library/ajax/WsSaveToModel.php logo parameter. The root cause is insecure handling of the logo input that allows uploading arbitrary files, enabling potential remote code execution or file inclusion depe...

PT-2018-14626

Name of the Vulnerable Software and Affected Versions Webiness Inventory version 2.3 Description The issue allows for an Arbitrary File upload via PHP code in the protected/library/ajax/WsSaveToModel.php, specifically through the logo parameter. Recommendations For version 2.3, consider restricti...

CVE-2018-18752: Unrestricted Upload of File with Dangerous Type

Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...

Webiness Inventory 2.9 Shell Upload Exploit

Exploit for php platform in category web applications Exploit Title: Webiness Inventory 2.9 Arbitrary File Upload Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Software Link: https://github.com/webiness/webinessinventory Version: 2.9 46 foreach $FILES as $file 47 $fileName =...

Simple POS and Inventory 1.0 - cat SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Simple POS and Inventory 1.0 - 'cat' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/11625/simple-pos-and-inventory-system.html Software Link:...

Simple POS and Inventory 1.0 - cat SQL Injection

Simple POS and Inventory 1.0 - cat SQL Injection Exploit Title: Simple POS and Inventory 1.0 - 'cat' SQL Injection Dork: N/A Date: 2018-10-24 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/11625/simple-pos-and-inventory-system.html Software Link:...

NoMachine Remote Code Execution Vulnerability

NoMachine is a remote desktop access tool from NoMachine Luxembourg. NoMachine versions prior to 5.3.27 and 6.x versions prior to 6.3.6 contain a security vulnerability in the wintab32.dll dynamic inventory. An attacker can exploit this vulnerability by hijacking the DLL to execute arbitrary code...

Qualys Broadens Security Offerings for Azure

Qualys is expanding its security and compliance capabilities for Microsoft Azure, by adding protection for the on-premises Azure Stack and extending capabilities for public cloud deployments. By using Qualys’ platform to defend hybrid IT environments, organizations get a unified view of their...

astoriaford.net XSS vulnerability

Open Bug Bounty ID: OBB-682353 Description| Value ---|--- Affected Website:| astoriaford.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Stronger Security with Global IT Asset Inventory

On a Friday afternoon before a long holiday weekend, a company’s security operations center receives a potentially serious alert: It appears that a domain controller has been tampered with. After examining event logs and overlaying network traffic, a SOC analyst confirms that a suspicious system...

birminghamfreightliner.com XSS vulnerability

Open Bug Bounty ID: OBB-677804 Description| Value ---|--- Affected Website:| birminghamfreightliner.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

auditysonscorner.com XSS vulnerability

Open Bug Bounty ID: OBB-673424 Description| Value ---|--- Affected Website:| auditysonscorner.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...