Lucene search
+L

3634 matches found

attackerkb
attackerkb
•added 2021/07/23 2:15 p.m.•8 views

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS9AI score0.01874EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/23 1:15 p.m.•84 views

CVE-2021-25206

SourceCodester Responsive Ordering System v1.0 contains an Arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via uploading a file to Product_model.php. The CVE entry CVE-2021-25206 is supported by multiple sources (NVD, Red Hat, CVE list, CNNVD, PRION, etc.). P...

9.8CVSS9.6AI score0.01874EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/07/23 12:00 a.m.•17 views

SourceCodester Responsive Ordering System 代码问题漏洞

SourceCodester Responsive Ordering System is an online ordering system. A security vulnerability in SourceCodester Responsive Ordering System v 1.0 allows an attacker to execute arbitrary code by uploading a file to Productmodel.php...

9.8CVSS8.8AI score0.01874EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/23 12:00 a.m.•4 views

PT-2021-16456

Name of the Vulnerable Software and Affected Versions: SourceCodester Responsive Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to Product model.php. This can lead to arbitrary file upload, potentially resulting in code execution...

9.8CVSS0.01874EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/23 12:00 a.m.•9 views

CVE-2021-25206: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS6.5AI score0.01874EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/22 8:15 p.m.•14 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS6AI score0.01874EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/22 8:15 p.m.•28 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS0.01874EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/22 8:15 p.m.•24 views

Design/Logic Flaw

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

7.5CVSS9.6AI score0.01874EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/07/22 8:15 p.m.•8 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS8.8AI score0.01874EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/22 7:15 p.m.•94 views

CVE-2021-25211

CVE-2021-25211 affects SourceCodester Ordering System v1.0. An arbitrary file upload vulnerability in ordering/admin/products/edit.php enables remote code execution. Exploitation details are not provided in the connected documents; CVSS metrics indicate Very High impact (C, I, A) with NETWORK att...

9.8CVSS9.6AI score0.01874EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/22 7:15 p.m.•37 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8AI score0.01874EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/07/22 12:00 a.m.•5 views

PT-2021-16459

Name of the Vulnerable Software and Affected Versions: SourceCodester Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to "ordering/admin/products/edit.php". This is an arbitrary file upload vulnerability. Recommendations: For...

9.8CVSS0.01874EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/07/22 12:00 a.m.•20 views

SourceCodester Ordering System 代码问题漏洞

SourceCodester Ordering System is a multi-store ordering system. In this system, customers can choose from a wide range of products, such as electronics, fashion apparel, home appliances, etc. A security vulnerability exists in SourceCodester Ordering System 1.0, which can be exploited by attacke...

9.8CVSS6.1AI score0.01874EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/22 12:00 a.m.•8 views

CVE-2021-25211: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS6.3AI score0.01874EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/07/19 12:00 a.m.•24 views

SQL Injection Vulnerability in Wechat Ordering System of Huitong Network

Shenzhen Huitong Network is a solution provider. Huitong Network WeChat Ordering System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.4AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•16 views

UVI-2021-1000048 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/05/31 3:39 p.m.•23 views

UVI-2021-1000044 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-24686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.5 Description The issue concerns the xprtrdma component, specifically the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•3 views

PT-2021-24803

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.10.37 Description: The issue is related to the xprtrdma component, specifically concerning the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/31 12:00 a.m.•2 views

PT-2021-28680

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.5 Description The issue concerns the xprtrdma component, specifically the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder