4058 matches found
PT-2019-17967
Name of the Vulnerable Software and Affected Versions XiaoCms version 20141229 Description An issue in XiaoCms allows SQL injection via the "table" parameter in the admin/index.php endpoint, specifically "/admin/index.php?c=database table". This can lead to PHP code execution by using "INTO...
CVE-2019-6127: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table SQL injection. This can be used for PHP code execution via "INTO OUTFILE" with a .php filename...
Vtiger CRM File Upload PHP Code Execution Vulnerability
Vtiger CRM is a customer relationship management software that helps businesses become organized, increase sales, improve marketing ROI and provide an enjoyable customer service experience. A file upload PHP code execution vulnerability exists in Vtiger CRM version 7.1.0 prior to Hotfix2. The...
CVE-2019-5009
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2019-5009
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2019-5009
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2019-5009: Unrestricted Upload of File with Dangerous Type
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using " ?" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2018-20599
UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadminfileedit action...
PT-2018-15469
Name of the Vulnerable Software and Affected Versions imcat version 4.4 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the boot/bootskip.php file using the root/run/adm.php endpoint. Recommendations For imcat version 4.4, consider...
PT-2018-15463
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by entering the code during an index.php sadmin fileedit action. Recommendations For UCMS version 1.4.7, consider restricting...
CVE-2018-20129: DedeCMS V5. 7 SP2 front Desk file upload getshell vulnerability alerts-a vulnerability alert-the black bar safety net
2018-12-11 in CVE Chinese application station published a DEDECMS 5.7 SP2 is the latest version there is a file upload vulnerability, with administrator privileges can exploit this vulnerability to upload and getshell execute arbitrary PHP code. After analysis and verification. The vulnerability...
PT-2018-15277
Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 2.0.7 Description The issue allows remote authenticated site administrator users to execute arbitrary PHP code throughout a multisite network. Recommendations For WP Maintenance Mode plugin versions...
PT-2018-15262
Name of the Vulnerable Software and Affected Versions DedeCMS version V5.7 SP2 Description A security issue was found that allows remote attackers to upload and execute arbitrary PHP code. This can be achieved by using a double extension and a modified ".php" substring in the filename, in...
WordPress Snap Creek Duplicator Code Injection Exploit
When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters befo...
CVE-2018-19422: Unrestricted Upload of File with Dangerous Type
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...
CVE-2018-19422
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these...
Code injection
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI...
PT-2018-14873
Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue allows remote attackers to execute arbitrary PHP code via the host parameter to the "install/" URI. Recommendations For LAOBANCMS version 2.0, consider restricting access to the install/ URI to minimi...
PT-2018-14841
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by placing the code in the DB PREFIX field, which is then written to database.php, when the index.php?s=index/install/setup...
