Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/09/07 12:1 a.m.15 views

FeehiCMS has an arbitrary file upload vulnerability

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS9.4AI score0.00433EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2009/08/19 10:0 a.m.17 views

CVE-2008-7005

include/modules/top/1-randomquote.php in Minb Is Not a Blog minb 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotestoedit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution...

7.8AI score0.02663EPSS
Exploits0References5
Prion
Prion
added 2007/03/14 6:19 p.m.15 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 inccheckdatelang.php, 2 inccharsetfx.php, 3 incconfigcolor.php, 4 inccurrencyset.php, 5 incdbmakelink.php, 6 incdiagnosticsreportfx.php, 7...

6.8CVSS7.9AI score0.23553EPSS
Exploits1References22Affected Software1
Exploit DB
Exploit DB
added 2006/11/20 12:0 a.m.54 views

Boonex 2.0 Dolphin - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21182/info Dolphin is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the...

7AI score
Exploits0
Rows per page
Query Builder