Lucene search
K

7 matches found

NVD
NVD
added 2019/02/07 4:29 p.m.9 views

CVE-2019-7535

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

5.3CVSS5.3AI score0.00232EPSS
Exploits0References1
Prion
Prion
added 2019/02/07 4:29 p.m.12 views

Path traversal

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

5CVSS5.3AI score0.00232EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/02/07 3:0 p.m.10 views

CVE-2019-7535

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

5.3AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2019/02/07 3:0 p.m.35 views

CVE-2019-7535

CVE-2019-7535 affects Gurock TestRail, specifically the index.php endpoint in version 5.3.0.3603. The issue leaks potentially sensitive information when handling an invalid request, demonstrated by full path disclosure and confirmation that PHP is used as the backend technology. The available doc...

5.3CVSS5.2AI score0.00232EPSS
Exploits0References1Affected Software1
Exploit DB
Exploit DB
added 2017/09/12 12:0 a.m.53 views

osTicket 1.10 - SQL Injection (PoC)

ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions Affected: = v1.10 Technology: PHP...

7AI score
Exploits0
exploitpack
exploitpack
added 2017/09/12 12:0 a.m.12 views

osTicket 1.10 - SQL Injection (PoC)

osTicket 1.10 - SQL Injection PoC 1. ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions...

Exploits0
myhack58
myhack58
added 2012/10/20 12:0 a.m.18 views

Zcncms1. 2. 8 Code of audit the summary file contains vulnerability and remediation-vulnerability and early warning-the black bar safety net

Prior to a introduction: zcncms is a webmaster of China based on php technology development of the content management system that provides content editing, keyword management, advertising management, link management module and a model, the program design is very concise and focus on the secondary...

7.3AI score
Exploits0
Rows per page
Query Builder