3 matches found
jersey: XXE via parameter entities
jersey: XXE via parameter entities not disabled by the jersey SAX parser...
DynamicPageList 资源管理错误漏洞
The DynamicPageList3 extension is a reporting tool for MediaWiki that lists category members and intersections in various formats and details.The DynamicPageList3 extension is vulnerable to a resource management error that stems from an unprocessed regular expression date entered in a parameter o...
CVE-2007-2857
PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parserpath parameter...