1271 matches found
PT-2020-19465
Name of the Vulnerable Software and Affected Versions HP nagios plugin for iLO versions 1.50 and earlier Description The issue is related to a php code injection vulnerability. Recommendations For versions 1.50 and earlier, update to a version later than 1.50 to resolve the issue...
CVE-2020-5593
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...
CVE-2020-5593
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...
CVE-2020-5593
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...
CVE-2020-5593
Zenphoto shows a concrete code-injection vulnerability CVE-2020-5593 in versions prior to 1.5.7. An attacker can trigger arbitrary PHP code execution on the server by convincing a user to upload a specially crafted ZIP file; the issue stems from how the ZIP payload is processed. Affected product:...
CVE-2020-5593
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...
CVE-2020-5593: Improper Control of Generation of Code
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file...
PT-2020-18566
Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.5.7 Description The issue allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. Recommendations For versions prior to 1.5.7, update to version 1.5.7 or...
PlaySMS index.php Unauthenticated Template Injection Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PlaySMS index.php Unauthenticated Template Injection Code Execution', 'Description' = %q This module exploits a preauth Server-Side Template...
Codiad Web IDE Code Injection Vulnerability
Codiad Web IDE is Codiad project a set of Web-based IDE Integrated Development Environment. A code injection vulnerability exists in Codiad Web IDE 2.8.4 and earlier versions, which can be exploited by an attacker to inject PHP code...
CVE-2019-19208
Codiad Web IDE through 2.8.4 allows PHP Code injection...
CVE-2019-19208
Codiad Web IDE through 2.8.4 allows PHP Code injection...
CVE-2019-19208
CVE-2019-19208 affects Codiad Web IDE up to version 2.8.4. The vulnerability is a PHP code injection vulnerability that, if exploited, can lead to arbitrary code execution on the server. The root cause is an injection point present before the initial configuration, enabling an attacker to run PHP...
PT-2020-10088
Name of the Vulnerable Software and Affected Versions Codiad Web IDE versions through 2.8.4 Description The issue allows PHP code injection. Recommendations For versions through 2.8.4, update to a version later than 2.8.4 to resolve the issue...
CVE-2019-19208: Improper Control of Generation of Code
Codiad Web IDE through 2.8.4 allows PHP Code injection...
CVE-2020-10389
admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings...
PT-2020-12059
Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9 Description The issue allows remote attackers to achieve code execution by injecting PHP code into any POST parameter when saving global settings. Recommendations For Chadha PHPKB Standard...
CVE-2020-8518
Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution...
