PT-2021-9871

Name of the Vulnerable Software and Affected Versions PhpOK version 5.4.137 Description The issue allows for SQL injection, enabling the injection of attachment data through SQL. This can then be used to call the attachment replacement function through the "api.php" endpoint to write a PHP file t...

Design/Logic Flaw

FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP file...

EGroupware 1.8.006 - Multiple Vulnerabilities

No description provided by source. 1）简单的CSRF利用下面创建新的管理员登录“ImmuniWeb”和密码“ImmuniWeb”： 2）利用CSRF 写入php文件 1.php"...