10031 matches found
CVE-2017-15935: Improper Control of Generation of Code
Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file...
PT-2017-14294
Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows for remote PHP code execution through the manager files function. This can only be exploited by administrators who upload a PHP file. Recommendations For Artica Pandora FMS version 7....
WordPress: UnResolved ChangeSet are Visible to Public That also Causes Information Disclosure
Hello, While testing Your Security I Observed that the Security Report Reported to You After Validation arranged for fix or you can say that a public repository created for the code powering the site at https://code.trac.wordpress.org/changeset/ID that Leaks Following Things 1.UnResolved Bugs 2.P...
CometChat Local File Inclusion
Exploit Title: CometChat Vendor Homepage: https://cometchat.com/ Version: 6.2.0 BETA 1 Tested on: Ubuntu Linux 14.04 -------------------------------------------------------------------------------------- In versions of CometChat before version v6.2.0 BETA 1 a bug existed which allowed any...
Kaltura 13.1.0 Remote Code Execution
!/usr/bin/env python Kaltura = 13.1.0 RCE CVE-2017-14143 https://telekomsecurity.github.io/2017/09/kaltura-rce.html $ python kalturarce.py "https://example.com" 0xxxxxxxx "system'id'" host: https://example.com entryid: 0xxxxxxxx code: system'id' + sending request.. uid=1003wwwrun gid=50004www...
CometChat < 6.2.0 BETA 1 - Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: CometChat Vendor Homepage: https://cometchat.com/ Version: 6.2.0 BETA 1 Tested on: Ubuntu Linux 14.04 -------------------------------------------------------------------------------------- In versions of CometChat before version...
CometChat < 6.2.0 BETA 1 - Local File Inclusion
Exploit Title: CometChat Vendor Homepage: https://cometchat.com/ Version: 6.2.0 BETA 1 Tested on: Ubuntu Linux 14.04 -------------------------------------------------------------------------------------- In versions of CometChat before version v6.2.0 BETA 1 a bug existed which allowed any...
Arbitrary Code Execution
October is vulnerable to arbitrary code execution. A malicious user with media management permission or asset management permission can upload a malicious file to the application, resulting in arbitrary PHP code be executed when the file is deserialized...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
Unrestricted file upload
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119: Unrestricted Upload of File with Dangerous Type
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution via the file upload functionality, potentially allowing site compromise and server-wide impact. The vulnerability is documented across multiple sources (NVD entry CVE-2017-1000119; GitHub/OSV/OSVDB advisories; Metasploit module and exploit...
CVE-2017-1000119
October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other applications on the server...
PT-2017-10822
Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for PHP code execution in the file upload functionality, which can result in site compromise and potentially affect other applications on the server. Recommendations For October CMS build 412,...
Remote Code Execution (RCE)
genix/cms is vulnerable to remote code execution RCE attacks. A malicious user can upload a module zip file containing arbitrary php code that executes arbitrary commands when extracted by the application...
CVE-2017-14958: Unrestricted Upload of File with Dangerous Type
lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via an upload of a .php file...
PT-2017-13779
Name of the Vulnerable Software and Affected Versions PivotX version 2.3.11 Description The issue concerns the improper blocking of uploads of dangerous file types by admin users in lib.php, allowing remote PHP code execution via an upload of a .php file. Recommendations For PivotX version 2.3.11...