10101 matches found
CVE-2026-115251
The Duplicator WordPress plugin (versions before 5.0.0 ) is vulnerable to Network-Wide PHP Code Execution due to an improperly restricted and unauthenticated one-click upgrade routine . An attacker with multisite child site administrator privileges—who is not a network administrator—can exploit t...
Part-DB arbitrary file upload vulnerability
Versions prior to Part-DB 2.12.1 contain an arbitrary file upload vulnerability. This vulnerability arises because the attachment upload handler stores uploaded files using client-supplied file extensions; however, the extension blacklist does not include “phar”. As a result, uploaded .phar files...
baserproject baserCMS arbitrary file upload vulnerability
BaserProject baserCMS versions prior to 5.0.0-beta1 and 5.3.2, as well as versions 5.4.0 and 5.4.2, contain an arbitrary file upload vulnerability. This vulnerability arises because PermissionGroupsService::build writes wildcard allow rules when the plugin lacks config/permission.php, allowing th...
CVE-2021-48016
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
CVE-2021-48016
DedeCMS (through version 5.8.1-beta ) is vulnerable to a PHP code injection vulnerability within the ShowMsg() function. The flaw exists because the HTTP Referer header is written into a DedeTemplate string and subsequently included by the application. Unauthenticated attackers can exploit this b...
EUVD-2021-34899
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
CVE-2017-20289
The Broadstreet Ad Widget plugin for WordPress (versions 2.2.0 before 2.12.0 ) contains a local file inclusion vulnerability. The root cause is the passing of unsanitized input to a require statement in views/modal/index.php. Authenticated users can execute attacker-chosen PHP files by supplying ...
CVE-2017-20289 Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter
Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...
CVE-2017-20289 Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter
Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in...
VulnCheck KEV: CVE-2021-48016
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
PT-2026-121345
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
CVE-2021-48016: Improper Control of Generation of Code
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary...
DedeCMS code injection vulnerability
DedeCMS versions 5.8.1-beta and earlier contain a code injection vulnerability. This vulnerability arises because the ShowMsg function writes an HTTP Referer header into the DedeTemplate string and includes it. Unauthenticated attackers can send a specially crafted Referer to...
SUSE CVE-2026-112307
sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...
Linux Distros Unpatched Vulnerability : CVE-2026-112307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via OutputPHPFilter when the outputformat='php' option is used. An attacker can supply SQL text containing unescaped dollar signs, embedding $expr or $expr sequences that OutputPHPFilter places inside...
DEBIAN-CVE-2026-112307
sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...
CVE-2026-112307
sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...