Lucene search
+L

399 matches found

Openbugbounty
Openbugbounty
•added 2023/10/28 7:04 p.m.•16 views

king-bikes.de Improper Access Control vulnerability OBB-3767563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2023/08/09 11:53 a.m.•495 views

Exploit for Open Redirect in King-Theme Kingcomposer

CVE-2022-0165 - Page Builder KingComposer WordPress Plugin - I...

6.1CVSS6.7AI score0.0428EPSS
SaveExploits4
Openbugbounty
Openbugbounty
•added 2023/06/26 7:30 a.m.•20 views

emploi.burgerking.fr Cross Site Scripting vulnerability OBB-3471000

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/06/03 3:38 a.m.•18 views

king-aegeus.aegeanhotels.net Cross Site Scripting vulnerability OBB-3377990

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/06/02 1:15 p.m.•14 views

CVE-2023-3031

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS5.8AI score0.0079EPSS
SaveExploits1References1
NVD
NVD
•added 2023/06/02 1:15 p.m.•27 views

CVE-2023-3031

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS5.1AI score0.0079EPSS
SaveExploits1References1
Prion
Prion
•added 2023/06/02 1:15 p.m.•22 views

Path traversal

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

3.3CVSS5.1AI score0.0079EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/02 12:42 p.m.•11 views

CVE-2023-3031 Prestahop module King-Avis - Path traversal

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS6.8AI score0.0079EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/06/02 12:42 p.m.•27 views

CVE-2023-3031 Prestahop module King-Avis - Path traversal

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS5.4AI score0.0079EPSS
SaveExploits1References1
CVE
CVE
•added 2023/06/02 12:42 p.m.•61 views

CVE-2023-3031

King-Avis Prestashop module (pre-17.3.15) suffers a path traversal vulnerability due to improper limitation of a pathname. An attacker who knows the download token can read arbitrary local files. Affected versions are King-Avis before 17.3.15. No exploit details are provided in the connected docu...

4.9CVSS5.1AI score0.0079EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/06/02 12:00 a.m.•16 views

King-Avis 路径遍历漏洞

King-Avis is an application from King-Avis, Inc. for online stores to provide automated review collection services. A security vulnerability exists in King-Avis versions prior to 17.3.15, which stems from an improper pathname restriction in the Prestashop module that allows a user who knows the...

4.9CVSS5.5AI score0.0079EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/06/02 12:00 a.m.•12 views

PT-2023-22627 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: King-Avis versions prior to 17.3.15 Description: The issue is related to Improper Limitation of a Pathname, leading to a Path Traversal vulnerability in the King-Avis module for Prestashop. This allows a user with knowledge of the download...

4.9CVSS5AI score0.0079EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/02 12:00 a.m.•4 views

CVE-2023-3031: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS5.9AI score0.0079EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2022/12/06 12:07 p.m.•15 views

denamcreditking.com Cross Site Scripting vulnerability OBB-3087773

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/11/23 4:32 p.m.•7 views

king-hookahs.co.il Cross Site Scripting vulnerability OBB-3068011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/11/03 12:00 a.m.•15 views

Denial of Service Vulnerability in Configuration King of Beijing Asian Control Technology Development Co.

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. Ltd. A denial of service vulnerability exists in Configuration King, which can be exploited by attackers to launch denial of service attacks...

7AI score
SaveExploits0
CNVD
CNVD
•added 2022/10/31 12:00 a.m.•27 views

Denial of Service Vulnerability in Configuration King (CNVD-2022-83556)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2022/10/28 12:00 a.m.•21 views

Denial of Service Vulnerability in Configuration King (CNVD-2022-78794)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•14 views

Survey King 代码问题漏洞

Survey King is one of the most powerful, beautiful and easy-to-install open source survey questionnaire systems from the individual developers of Survey King in China. A security vulnerability exists in Survey King version 0.2.0, which originates from the retention of a user's session cookie afte...

6.5CVSS6.5AI score0.01309EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/03/24 10:15 p.m.•11 views

CVE-2022-26249

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack...

9.8CVSS6.1AI score0.0188EPSS
SaveExploits1References2
Rows per page
Query Builder