74 matches found
CVE-2018-18436
JTBCPHP 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action=add URI...
EUVD-2019-19028
Malware in sbrugna...
EUVD-2018-9584
Malware in sbrugna...
EUVD-2019-17823
Malware in sbrugna...
EUVD-2018-9583
Malware in sbrugna...
EUVD-2018-9582
Malware in sbrugna...
EUVD-2018-11025
Malware in sbrugna...
EUVD-2018-11235
Malware in sbrugna...
EUVD-2018-11236
Malware in sbrugna...
EUVD-2018-9182
Malware in sbrugna...
EUVD-2018-10164
Malware in sbrugna...
CVE-2019-8433
JTBCPHP 3.0.1.8 allows Arbitrary File Upload via the console//console/file/manage.php?type=list URI, as demonstrated by a .php file...
Command Execution Vulnerability in JTBC Web Content Management System (PHP)
JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. A command execution vulnerability exists in JTBC Web Content Management System PHP, which can be exploited by an attacker to gain control of the server...
File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.
JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...
Design/Logic Flaw
An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...
CVE-2019-9662
An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...
CVE-2019-9662
An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...
CVE-2019-9662
CVE-2019-9662 affects JTBC(PHP) 3.0.1.8, specifically its cache management module. The issue allows deletion of arbitrary files ending with inc.php through the URL parameter: console/cache/manage.php?type=action&action=batch&batch=delete&ids=../, indicating a path-traversal/permission problem. Th...
CVE-2019-9662
An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...
JTBC (PHP) Access Control Error Vulnerability
JTBC PHP is a PHP-based open source content management system CMS. cache management module is one of the cache management module . An access control error vulnerability exists in the cache management module in JTBC PHP version 3.0.1.8. An attacker can exploit this vulnerability to delete any file...