Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-10050

Malware in sbrugna...

8.8CVSS8.7AI score0.00969EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/23 12:00 a.m.•5 views

CVE-2022-25402: Undefined Security Weakness

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

9.1CVSS8.2AI score0.01609EPSS
SaveExploits1References1
NVD
NVD
•added 2021/08/30 6:15 p.m.•29 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS0.00969EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/30 6:15 p.m.•25 views

Design/Logic Flaw

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

6.5CVSS8.4AI score0.00969EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/08/30 4:04 p.m.•32 views

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.5AI score0.00969EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/30 12:00 a.m.•5 views

CVE-2020-18121: Incorrect Permission Assignment for Critical Resource

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

8.8CVSS5.8AI score0.00969EPSS
SaveExploits1References2
NVD
NVD
•added 2020/01/28 8:15 p.m.•26 views

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

8.8CVSS8.7AI score0.01584EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2020/01/28 7:09 p.m.•40 views

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

8.8AI score0.01584EPSS
SaveExploits3References3
NVD
NVD
•added 2006/07/27 1:04 a.m.•33 views

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...

7.5CVSS8.6AI score0.03927EPSS
SaveExploits2References9
Cvelist
Cvelist
•added 2006/07/27 12:00 a.m.•39 views

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...

8.6AI score0.03927EPSS
SaveExploits2References9
Rows per page
Query Builder