Osclass Security Advisory 3.4.1 - Local File Inclusion

A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. id: CVE-2014-6308 info: name: Osclass Security Advisory 3.4.1 - Local File Inclusion author: daffainfo...

📄 glFusion 1.3.0 Blind SQL Injection

A critical blind SQL Injection vulnerability exists in glFusion CMS version 1.3.0, affecting the Media Gallery search functionality. The vulnerability allows unauthenticated remote attackers to execute arbitrary SQL commands and potentially compromise the entire database. This is older research...

EUVD-2014-6165

Malware in sbrugna...

EUVD-2012-5086

Malware in sbrugna...

EUVD-2012-5085

Malware in sbrugna...

EUVD-2018-6398

Malware in sbrugna...

EUVD-2014-7933

Malware in sbrugna...

EUVD-2012-0996

Malware in sbrugna...

EUVD-2014-7932

Malware in sbrugna...

EUVD-2016-1745

Malware in sbrugna...

EUVD-2014-7934

Malware in sbrugna...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

CVE-2012-0973

Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the 1 oscsearchcategoryid function in oc-includes/osclass/helpers/hSearch.php and 2 findBySlug functio...

CVE-2016-10751

osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax=ajaxupload...

CVE-2012-0974

Multiple cross-site scripting XSS vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sCity, 2 sPattern, 3 sPriceMax, and 4 sPriceMin parameters in a search action to...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

Sql injection

Osclass 5.1.2 is vulnerable to SQL Injection...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...