5599 matches found
CVE-2019-15521: Deserialization of Untrusted Data
Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object...
PT-2019-14243
Name of the Vulnerable Software and Affected Versions Spoon Library versions through 2014-02-06 Fork CMS versions prior to 1.4.1 Description The issue allows PHP object injection via a cookie containing an object. This can be exploited by manipulating the cookie to inject malicious PHP objects...
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
Design/Logic Flaw
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
CVE-2018-20987
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
CVE-2018-20987
CVE-2018-20987 affects the Newsletters Lite WordPress plugin. The connected documents confirm a PHP object injection flaw in newsletters-lite before version 4.6.8.6, caused by an insecure deserialization condition in the plugin’s code path. This vulnerability can enable remote code execution or s...
CVE-2017-18583
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection...
CVE-2017-18583
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection...
CVE-2017-18583
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection...
CVE-2017-18583
CVE-2017-18583 affects the WordPress plugin post-pay-counter (before 2.731) with a PHP Object Injection flaw. The advisory sources identify this as a high/critical issue: CVSS v2 base score 7.5 (HIGH) and CVSS v3.0 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and imp...
PT-2019-10424
Name of the Vulnerable Software and Affected Versions newsletters-lite plugin versions prior to 4.6.8.6 Description The issue concerns PHP object injection in the newsletters-lite plugin for WordPress. Recommendations For versions prior to 4.6.8.6, update to version 4.6.8.6 or later to resolve th...
PT-2019-8517
Name of the Vulnerable Software and Affected Versions post-pay-counter plugin for WordPress versions prior to 2.731 Description The issue is related to PHP Object Injection in the post-pay-counter plugin for WordPress. Recommendations For versions prior to 2.731, update the post-pay-counter plugi...
CVE-2018-20987: Deserialization of Untrusted Data
The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...
CVE-2017-18583: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection...
Breaking Into Your Company's Internal Network - SuiteCRM 7.11.4
As part of our efforts to make the open source web application space more secure we scanned SuiteCRM 7.11.4 with our static code analysis tool RIPS and we detected multiple critical vulnerabilities. Among them is a SQL Injection that can be exploited as a normal user CVE-2019-12598, which can be...
Agent Tesla Panel Remote Code Execution
This module exploits a command injection vulnerability within the Agent Tesla control panel, in combination with an SQL injection vulnerability and a PHP object injection vulnerability, to gain remote code execution on affected hosts. Panel versions released prior to Sepetember 12, 2018 can be...
Exploit for Deserialization of Untrusted Data in Pydio
CVE-2018-20718 This is a POC for CVE-2018-20718. It is a PHP O...
e107 < 2.1.3 SQL Injection Vulnerability
e107 is prone to an SQL injection vulnerability through object injection. Copyright C 2019 Greenbone Networks GmbH, https://www.greenbone.net SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...