1024 matches found
Cross-Site Scripting (XSS)
Cacti 1.2.8 has stored XSS in datasources.php, colortemplatesitem.php, graphs.php, graphitems.php, lib/apiautomation.php, useradmin.php, and usergroupadmin.php, as demonstrated by the description parameter in datasources.php a raw string from the database that is displayed by $header to trigger t...
CVE-2022-0499
The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones...
taoCMS file upload vulnerability
taoCMS is a file management system. taoCMS is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...
GHSA-3FVF-2GP4-89WQ Possibility for Denial of Service by overwriting PHP files with language exports
Impact Laravel Translation Manager didn't check the locale name, which allowed directory traversal when exporting files. The content would be a PHP file returning an array of translations, but this could lead to unexpected results, like denial of service. Access to the Laravel Translation Manager...
Possibility for Denial of Service by overwriting PHP files with language exports
Impact Laravel Translation Manager didn't check the locale name, which allowed directory traversal when exporting files. The content would be a PHP file returning an array of translations, but this could lead to unexpected results, like denial of service. Access to the Laravel Translation Manager...
CVE-2021-24216
The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations...
CVE-2021-24216
The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations...
Design/Logic Flaw
The Custom Content Shortcode WordPress plugin before 4.0.2 does not validate the data passed to its load shortcode, which could allow Contributor+ v 4.0.1 or Admin+ v 4.0.2 users to display arbitrary files from the filesystem such as logs, .htaccess etc, as well as perform Local File Inclusion...
PT-2022-13185
Name of the Vulnerable Software and Affected Versions The Catch Themes Demo Import WordPress plugin versions prior to 2.1.1 Description The issue allows high privilege admins to upload arbitrary PHP files, potentially leading to remote code execution RCE, even when the blog is hardened with...
PT-2022-9438
Name of the Vulnerable Software and Affected Versions All-in-One WP Migration WordPress plugin versions prior to 7.41 Description The issue allows administrators to upload PHP files on their site due to a lack of validation of uploaded files' extensions. This affects even multisite installations...
Improper regex in htaccess file
Impact the default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path. Patches Please upgrade to...
GHSA-MJ6M-246H-9W56 Improper regex in htaccess file
Impact the default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path. Patches Please upgrade to...
Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF
The plugin does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones. PoC Or, as admin, upload a PHP file via the Sermon Files feature of the plugin. The file will be ...
CVE-2022-25402
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...
Improper access control
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...
Hms 安全漏洞
HMS is a computer or web based hospital management system by Kabir Khyrul personal developer in Bangladesh. It helps in managing the operations of a hospital or any healthcare organization. There is a security vulnerability in HMS that stems from the product not effectively restricting access to...
CVE-2022-25402
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...
CVE-2022-25402
CVE-2022-25402 describes an improper access-control flaw in HMS v1.0 that allows unauthenticated attackers to read and modify all PHP files. The root cause is an incorrect access-control mechanism that fails to limit access to sensitive PHP assets. Affected product: HMS v1.0 (as per multiple sour...
PT-2022-17265 · Hms · Hms
Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: An issue with access control in HMS allows unauthenticated attackers to read and modify all PHP files. Recommendations: For HMS version 1.0, consider restricting access to PHP files until a fix is available. As a...
