51 matches found
PT-2026-21322
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection...
phpMoAdmin 跨站脚本漏洞
phpMoAdmin is a MongoDB database management tool developed by Valentin Hilbig. Version 1.1.5 of phpMoAdmin contains a cross-site scripting vulnerability, which stems from improper cleaning of collection parameters. This vulnerability may lead to storage-based cross-site scripting attacks...
PT-2026-21321
phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in user...
phpMoAdmin 跨站脚本漏洞
phpMoAdmin is a MongoDB database management tool developed by Valentin Hilbig. Version 1.1.5 of phpMoAdmin contains a cross-site scripting vulnerability, which stems from improper cleaning of the newdb parameter. This vulnerability may lead to reflective cross-site scripting attacks...
phpMoAdmin Cross Site Scripting
A cross site scripting vulnerability exists in phpMoAdmin. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...
VulnCheck KEV: CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...
Command Execution Vulnerability in PHPMoAdmin
PHPMoAdmin is an online MongoDB management tool developed in PHP. A command execution vulnerability exists in PHPMoAdmin. An attacker can exploit the vulnerability to execute arbitrary code and gain server privileges...
phpMoAdmin MongoDB GUI 1.1.5 - Cross-Site Request Forgery Cross-Site Scripting
phpMoAdmin MongoDB GUI 1.1.5 - Cross-Site Request Forgery Cross-Site Scripting Exploit Title: phpMoAdmin 1.1.5 - MongoDB GUI | Multiple Vulnerabilities Date: 03.01.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmoadmin.com Software Link: http://www.phpmoadmin.com/file/phpmoadmin.z...
phpMoAdmin 1.1.5 Cross Site Request Forgery / Cross Site Scripting
Exploit Title: phpMoAdmin 1.1.5 - MongoDB GUI | Multiple Vulnerabilities Date: 03.01.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmoadmin.com Software Link: http://www.phpmoadmin.com/file/phpmoadmin.zip Version: 1.1.5 Introduction phpMoAdmin - MongoDB GUI MongoDB administration...
phpMoAdmin #MongoDB GUI 1.1.5 - CSRF / XSS Vulnerabilities
Exploit for php platform in category web applications Exploit Title: phpMoAdmin 1.1.5 - MongoDB GUI | Multiple Vulnerabilities Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmoadmin.com Software Link: http://www.phpmoadmin.com/file/phpmoadmin.zip Version: 1.1.5 Introduction phpMoAdmin ...
phpMoAdmin MongoDB GUI 1.1.5 - Cross-Site Request Forgery / Cross-Site Scripting
Exploit Title: phpMoAdmin 1.1.5 - MongoDB GUI | Multiple Vulnerabilities Date: 03.01.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.phpmoadmin.com Software Link: http://www.phpmoadmin.com/file/phpmoadmin.zip Version: 1.1.5 Introduction phpMoAdmin - MongoDB GUI MongoDB administration...
MongoDB phpMoAdmin Unauthenticated Remote Code Execution (CVE-2015-2208)
A remote code execution vulnerability exists in MongoDB administration tool for PHP. The vulnerability is due to insufficient validation of user supplied input when processing HTTP requests. A remote authenticated attacker could exploit this vulnerability by sending a malicious request...
phpMoAdmin Detection
The remote web server is hosting phpMoAdmin, a web application for managing MongoDB instances. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid84216; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...
phpMoAdmin saveObject Remote Command Execution
The remote web server is hosting a version of phpMoAdmin that is affected by a remote code execution vulnerability due to improper sanitization of input passed via the 'object' POST parameter in the saveObject function in the moadmin.php script. A remote attacker can exploit this, via a specially...
phpMoAdmin Arbitrary Command Execution Vulnerability
phpMoAdmin is a MongoDB GUI management tool . An arbitrary command execution vulnerability exists in phpMoAdmin 1.1.2, which allows remote attackers to execute arbitrary commands via shell metacharacters in object parameters...
MongoDB management tool exposure remote code execution vulnerability-vulnerability warning-the black bar safety net
MongoDB, the IT sector mainstream non-relational database NoSQL platform is one that is based on a table of a relational database of the popular alternatives. Recently, the management for MongoDB is a GUI tool phpMoAdmin is the storm has a very serious security vulnerability, once exploited, this...
CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...
CVE-2015-2208
The CVE-2015-2208 issue affects phpMoAdmin 1.1.2, where the saveObject function (moadmin.php) is vulnerable to remote code execution via shell metacharacters in the object parameter. This is a server-side RCE vulnerability exposed in the PHP-based MongoDB GUI tool, allowing an attacker to craft a...
CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...
phpMoAdmin 1.1.3 /moadmin.php 代码执行漏洞
/moadmin.php / Saves an object @param string $collection @param string $obj @return array / public function saveObject$collection, $obj eval'$obj=' . $obj . ';'; //cast from string to array return $this-mongo-selectCollection$collection-save$obj; …. $action = isset$GET'action' ? $GET'action' :...