Lucene search
+L

3054 matches found

NVD
NVD
•added 2022/02/24 7:15 p.m.•24 views

CVE-2022-24232

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS0.01526EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/24 7:15 p.m.•30 views

Remote file inclusion

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.7AI score0.01526EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/02/24 7:01 p.m.•5 views

CVE-2021-44663

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

9.8CVSS0.0399EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/02/24 6:17 p.m.•35 views

CVE-2022-24232

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.9AI score0.01526EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/24 3:15 p.m.•23 views

Security feature bypass

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.8AI score0.01224EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/02/24 3:15 p.m.•27 views

Design/Logic Flaw

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.8AI score0.01224EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•6 views

CVE-2021-44663: Undefined Security Weakness

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

9.8CVSS8.2AI score0.0399EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•2 views

PT-2022-16551

Name of the Vulnerable Software and Affected Versions Hospital Patient Record Management System version 1.0 Description A local file inclusion issue allows attackers to execute arbitrary code via a crafted PHP file. Recommendations For Hospital Patient Record Management System version 1.0, consid...

7.8CVSS0.01526EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-24232: Inclusion of Functionality from Untrusted Control Sphere

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS7.8AI score0.01526EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/02/23 9:11 p.m.•41 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

8AI score0.01224EPSS
SaveExploits1References1
Mend
Mend
•added 2022/02/23 9:11 p.m.•4 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

8.5CVSS0.01224EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/23 9:11 p.m.•25 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.7AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/02/23 9:11 p.m.•42 views

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

8AI score0.01224EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/23 9:11 p.m.•24 views

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/23 12:00 a.m.•1 views

PT-2022-17078

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description A vulnerability in the component /templates/install.php of WBCE CMS allows attackers to execute arbitrary code via a crafted PHP file. Recommendations For WBCE CMS version 1.5.2, consider removing or...

7.8CVSS0.01224EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/02/23 12:00 a.m.•4 views

PT-2022-17076

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description A vulnerability in the component /languages/index.php allows attackers to execute arbitrary code via a crafted PHP file. Recommendations For WBCE CMS version 1.5.2, consider disabling access to the...

7.8CVSS0.01224EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/23 12:00 a.m.•9 views

CVE-2022-25099: Undefined Security Weakness

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS7.7AI score0.01224EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/23 12:00 a.m.•9 views

CVE-2022-25101: Undefined Security Weakness

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file...

7.8CVSS7.7AI score0.01224EPSS
SaveExploits1References1
WPVulnDB
WPVulnDB
•added 2022/02/21 12:00 a.m.•39 views

WPCargo < 6.9.0 - Unauthenticated RCE

The plugin contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE PoC import sys import binascii import requests This is a magic string that when treated as pixels and compressed using the png algorithm, will cause to be written ...

0.7AI score0.56148EPSS
SaveExploits3Affected Software1
Packet Storm
Packet Storm
•added 2022/02/21 12:00 a.m.•270 views

Microweber 1.2.11 Shell Upload

Exploit Title: Microweber 1.2.11 - Remote Code Execution RCE Authenticated Google Dork: NA Date: 02/17/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://microweber.org/ Software Link: https://github.com/microweber/microweber Version: 1.2.11 Tested on: KALI OS CVE :...

9CVSS7.2AI score0.51193EPSS
SaveExploits4
Rows per page
Query Builder