Advantech WebAccess datacore Service datacore.exe Path strcpy Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x791E IOCTL in the Kernel subsystem. A stack-based buffer...

Remote Command Execution Vulnerability in Service_path Parameter of Security Authentication Gateway of Shanghai Gale Software Co.

Gehl Secure Authentication Gateway is to provide digital certificate based authentication service, data link encryption service for network applications. A remote command execution vulnerability exists in the servicepath parameter in the /api/query.php?getaction=log page of the Secure...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...

Unrestricted file upload

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

PT-2015-5917

Name of the Vulnerable Software and Affected Versions Simple Ads Manager plugin versions prior to 2.5.96 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the sam-ajax-admin.php file, and then accessing it via a direct...

CVE-2015-2825: Undefined Security Weakness

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

CVE-2014-9261: Improper Limitation of a Pathname to a Restricted Directory

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. dot dot in the path parameter to index.php...

PT-2015-4170

Name of the Vulnerable Software and Affected Versions Codoforum version 2.5.1 Description The issue concerns the sanitize function, which does not properly filter directory traversal sequences. This allows remote attackers to read arbitrary files by including a .. dot dot in the path parameter to...

CVE-2015-1053

Cross-site scripting XSS vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/filemanager/filemanager/editfile...

PT-2015-5040

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 2.2.1 Description A cross-site scripting XSS issue exists in the administrative backend, allowing remote attackers to inject arbitrary web script or HTML via the path parameter to "admin/file manager/file...

CVE-2015-1053: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/filemanager/filemanager/editfile...

Codiad path directory traversal vulnerability

Codiad is an open source Web-based IDE application for writing and editing code online. A directory traversal vulnerability exists in Codiad components/filemanager/download.php, which allows an attacker to read the contents of arbitrary files via the path parameter...

PT-2015-3613

Name of the Vulnerable Software and Affected Versions Joomlaskin JS Multi Hotel plugin versions 2.2.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the path parameter ...

CVE-2014-100008: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/deleteimg.php in the Joomlaskin JS Multi Hotel aka JS MultiHotel and Js-Multi-Hotel plugin 2.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the path parameter...

CVE-2014-9581

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information...

PT-2015-4291

Name of the Vulnerable Software and Affected Versions Codiad version 2.4.3 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the path parameter of the download.php file in the components/filemanager directory...

PT-2014-8456

Name of the Vulnerable Software and Affected Versions C97net Cart Engine versions prior to 4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the path parameter in the "drop down TOP menu with path" section or the print this page variable in the footer...

CVE-2014-8307: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

Directory traversal

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...

CVE-2014-5368

Directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter...