4742 matches found
SQL Injection Vulnerability in SemCMS SE***_Me***.php File
SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEMe.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
SemCMS SE***_In***.php file suffers from SQL injection vulnerability (CNVD-2020-18769)
SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEIn.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...
PT-2020-2411 · Php +8 · Php +8
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x below 7.2.9 PHP versions 7.3.x below 7.3.16 PHP versions 7.4.x below 7.4.4 Description: The issue is related to the exif read data function in PHP, which can cause the language to read one byte of uninitialized memory while...
CVE-2020-7059
Removed by vendor...
macOS 10.15.x < 10.15.3 / 10.14.x < 10.14.6 / 10.13.x < 10.13.6
The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.3, 10.13.x prior to 10.13.6, 10.14.x prior to 10.14.6. It is, therefore, affected by multiple vulnerabilities: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain...
Security Bulletin: API Connect is impacted by a vulnerability in PHP (CVE-2019-11043)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-11043 DESCRIPTION: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocat...
NewStart CGSL CORE 5.05 / MAIN 5.05 : php Vulnerability (NS-SA-2020-0001)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has php packages installed that are affected by a vulnerability: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write...
8tupian image encryption platform i***_ch***.php file has SQL injection vulnerability
8tupian Image Encryption Platform is a web platform that can encrypt images. A SQL injection vulnerability exists in the 8tupian Image Encryption Platform ich.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
Car Rental Project 1.0 Remote Code Execution
Exploit Title: Car Rental Project v.1.0 Remote Code Execution Google Dork: N/A Date: 1/3/2020 Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: 1.0 Tested on: Windows CVE : CVE-2020-5509...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in PHP (CVE-2018-19518)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in PHP. Vulnerability Details CVEID: CVE-2018-19518 DESCRIPTION: University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of...
Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04724)
Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the Short Application Name and Application Name fields of the config.php page in version 3.67 of SiT! The vulnerability stems from the lack of prope...
Arbitrary File Deletion Vulnerability in Yunyou City Substation System
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YunYu city substation system Up.php file exists arbitrary file deletion vulnerability. Attackers can modify the parameters to delete arbitrary files...
NewStart CGSL CORE 5.04 / MAIN 5.04 : php Vulnerability (NS-SA-2019-0214)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has php packages installed that are affected by a vulnerability: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write...
The vulnerability in the ext/phar/phar_object.c component of the PHP interpreter allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability in the ext/phar/pharobject.c component of the PHP interpreter exists due to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...
Command Execution Vulnerability in Blue Route Blog System si***_mo***.php Page
Blue Route Blog System is built with PHP+MySQL. A command execution vulnerability exists in the simo.php page of the Blue Route blog system, which can be exploited by an attacker to perform malicious operations...
Exploit for Out-of-bounds Write in Php
CVE-2019-11043 0th3rs Security Team ================...
PHP Remote Code Execution Vulnerability (CVE-2019-11043)
Certain versions of PHP 7 running on NGINX with php-fpm enabled can be vulnerable to the remote code execution vulnerability CVE-2019-11043. Given the simplicity of the exploit, all web servers using the vulnerable version of PHP should be upgraded to non-vulnerable PHP versions as soon as...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerability (USN-4166-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4166-1 advisory. It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issu...
