CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-23986

CVE-2022-23986 affects phpUploader v1.2 and earlier. The vulnerability is an SQL injection caused by insufficient handling of user-supplied input, allowing a remote unauthenticated attacker to obtain data from the database. Public sources (NVD/Red Hat and JVN family of advisories) confirm impact ...

PT-2022-16695

Name of the Vulnerable Software and Affected Versions phpUploader versions 1.2 and earlier Description A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For phpUploader versions 1.2 and earlier, at the...

PT-2022-16389

Name of the Vulnerable Software and Affected Versions phpUploader versions 1.2 and earlier Description A SQL injection issue allows a remote unauthenticated attacker to obtain database information via unspecified vectors. Recommendations For phpUploader versions 1.2 and earlier, at the moment,...

CVE-2022-23986: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-24435: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

Multiple vulnerabilities in phpUploader

Overview phpUploader provided by Dojin Club MICMNIS contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2022-24435 SQL Injection CWE-89 - CVE-2022-23986 Toyama Taku reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#00095004: Multiple vulnerabilities in phpUploader

phpUploader provided by Dojin Club MICMNIS contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2022-24435 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3 SQ...

PhpUploader 跨站脚本漏洞

PhpUploader is a simple Php uploader by the Japanese individual developer Shimosyan. PhpUploader suffers from a cross-site scripting vulnerability that stems from insufficient handling of user-supplied data. A remote attacker can exploit this vulnerability to permanently inject and execute...