1488 matches found
CVE-2020-11985
IP address spoofing when proxying using modremoteip and modrewrite For configurations using proxying with modremoteip and certain modrewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively...
CVE-2020-11985: Insufficient Verification of Data Authenticity
IP address spoofing when proxying using modremoteip and modrewrite For configurations using proxying with modremoteip and certain modrewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively...
CVE-2020-14069
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...
Sql injection
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...
CVE-2020-14069
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...
CVE-2020-14069: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php...
Artica Pandora FMS Remote Code Execution Vulnerability (CNVD-2020-19576)
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote code execution vulnerability exists in Pandora FMS 7.0 NG. The vulnerability stems from...
CVE-2020-5844
index.php?sec=godmode/extensions&sec2=extensions/filesrepo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742FIXPERL2020...
CVE-2020-5844
Pandora FMS v7.0 NG (specifically v7.0NG.742_FIX_PERL2020) is affected by CVE-2020-5844. The vulnerability resides at index.php?sec=godmode/extensions&sec2=extensions/files_repo, where authenticated administrators can upload arbitrary PHP scripts and trigger execution by base64-decoding the file ...
CVE-2020-5844: Unrestricted Upload of File with Dangerous Type
index.php?sec=godmode/extensions&sec2=extensions/filesrepo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742FIXPERL2020...
PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability
PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the 'searchtext' parameter of the search-results.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability...
PT-2020-10389
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a problem where the searchtext parameter in the "search-results.php" endpoint is vulnerable to XSS. This means an attacker could potentially inject...
PT-2020-10390
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a SQL Injection vulnerability. Specifically, the news id parameter in the news edit.php script is vulnerable. Recommendations For version 4.0.9, avoid...
CVE-2019-20336: Improper Neutralization of Input During Web Page Generation
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...
CVE-2013-4796
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...
Cross site request forgery (csrf)
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...
CVE-2013-4796
CVE-2013-4796 concerns ReviewBoard 1.6.17. According to the Red Hat security entry and related sources in the connected documents, the issue enables code execution by attaching PHP scripts to a review request. The material does not provide vendor-specific affected versions beyond 1.6.17, nor does...
CVE-2013-4796: Unrestricted Upload of File with Dangerous Type
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...
PT-2019-6972
Name of the Vulnerable Software and Affected Versions ReviewBoard version 1.6.17 Description The issue allows code execution by attaching PHP scripts to a review request. Recommendations For ReviewBoard version 1.6.17, update to a version that fixes this issue to prevent code execution by attache...
PHP Scripts Mall School College Portal with ERP Script Cross-Site Scripting Vulnerability
PHP Scripts Mall School College Portal with ERP Script is a school management system from PHP Scripts Mall India. A cross-site scripting vulnerability exists in /pro-school/index.php?student/message/sendreply/ in PHP Scripts Mall School College Portal with ERP Script 2.6.1 and earlier versions. T...