CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

EUVD-2018-11147

Malware in sbrugna...

Command injection

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

CVE-2018-19457

CVE-2018-19457 affects Logicspice FAQ Script 2.9.7, where an attacker can upload arbitrary files to admin/faqs/faqimages and achieve remote command execution via a crafted .php file. Public references (e.g., Exploit-DB) indicate exploit availability. NVD metrics show CVSSv2 6.5 (MEDIUM) and CVSSv...

PT-2018-14965

Name of the Vulnerable Software and Affected Versions Logicspice FAQ Script version 2.9.7 Description The issue allows uploading arbitrary files, leading to remote command execution. This can be achieved via the "admin/faqs/faqimages" endpoint with a .php file. Recommendations For version 2.9.7,...

CVE-2018-19457: Unrestricted Upload of File with Dangerous Type

Logicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command execution via admin/faqs/faqimages with a .php file...

Logicspice FAQ Script 2.9.7 Remote Code Execution

Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Dork: N/A Date: 2018-09-03 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link: https://www.logicspice.com/app/webroot/files/document/phpmyfaq-2.9.7.zip Version:...

Logicspice FAQ Script 2.9.7 - Remote Code Execution

Logicspice FAQ Script 2.9.7 - Remote Code Execution Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Dork: N/A Date: 2018-09-03 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link:...

Logicspice FAQ Script 2.9.7 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link:...

Logicspice FAQ Script 2.9.7 - Remote Code Execution

Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Dork: N/A Date: 2018-09-03 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link: https://www.logicspice.com/app/webroot/files/document/phpmyfaq-2.9.7.zip Version:...