196 matches found
P2PWIFICAM2 for iOS 10.4.1 - Camera ID Denial of Service (PoC)
P2PWIFICAM2 for iOS 10.4.1 - Camera ID Denial of Service PoC Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iO...
Security fix for the ALT Linux 8 package sudo version 1:1.8.28-alt1
1:1.8.28-alt1 built Oct. 31, 2019 Ivan Zakharyaschev in task 240030 Oct. 15, 2019 Evgeny Sinelnikov - Update to autumn security release closes: 37334 - Code execution with euid==0 in rare box configurations fixes: CVE-2019-14287 - Fix post script for sudowheel control in case of upgrade in not...
Ivan Cordoba Generic Content Management System Cross-Site Scripting Vulnerability (CNVD-2019-16169)
Ivan Cordoba Generic Content Management System CMS is a content management system CMS based on MySQL and PHP. A cross-site scripting vulnerability exists in the Administrator/users.php file in Ivan Cordoba Generic CMS on 2018-04-28 and earlier versions, which can be exploited by a remote attacker...
Ivan Cordoba Generic Content Management System Cross-Site Scripting Vulnerability
Ivan Cordoba Generic Content Management System CMS is a content management system CMS based on MySQL and PHP. A cross-site scripting vulnerability exists in the Administrator/addpictures.php file in Ivan Cordoba Generic CMS on 2018-04-28 and earlier versions, which can be exploited by a remote...
Ivan Cordoba Generic Content Management System SQL Injection Vulnerability (CNVD-2019-16171)
Ivan Cordoba Generic Content Management System CMS is a content management system CMS based on MySQL and PHP. A SQL injection vulnerability in the user/index.php file in Ivan Cordoba Generic CMS on 2018-04-28 and earlier versions can be exploited by remote attackers to bypass authentication...
CVE-2018-20589
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/addpictures.php article ID...
Code injection
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/addpictures.php article ID...
CVE-2018-20590
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...
CVE-2018-20589
The CVE-2018-20589 entry concerns Ivan Cordoba Generic Content Management System (CMS) up to 2018-04-28, affected by a cross-site scripting (XSS) flaw in Administrator/add_pictures.php that relies on an article ID. Technical detail across connected sources specifies the vulnerability as XSS in th...
CVE-2018-20590
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...
CVE-2018-20590
CVE-2018-20590 affects the Ivan Cordoba Generic Content Management System (CMS) up to 2018-04-28. The vulnerability is a Cross-Site Scripting (XSS) flaw in the file or path used by the Administrator/users.php user ID. The linked CNVD entry describes that the XSS can allow execution of arbitrary J...
CVE-2018-20589
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/addpictures.php article ID...
CVE-2018-20590: Improper Neutralization of Input During Web Page Generation
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...
CVE-2018-20589: Improper Neutralization of Input During Web Page Generation
Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/addpictures.php article ID...
CVE-2018-20568
Administrator/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...
CVE-2018-20568
Administrator/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...
CVE-2018-20569
user/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...
Sql injection
Administrator/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...