115 matches found
Arbitrary Code Execution Vulnerability in phpyun
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun has an arbitrary code execution vulnerability that can be exploited by attackers to gain control of the web server...
Code execution vulnerability in phpyun v4.6 (CNVD-2019-06252)
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A code execution vulnerability exists in phpyun v4.6, which can be exploited by an attacker to gain control of the web server by constructing specifi...
Directory traversal
The function downsqlaction in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=downsql&name=../ URI...
CVE-2018-18713
The function downsqlaction in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=downsql&name=../ URI...
CVE-2018-18713
CVE-2018-18713 affects PHPYun 4.6. The vulnerability is in the function down_sql_action() of /admin/model/database.class.php, allowing remote attackers to read arbitrary files via directory traversal using the URI m=database&c=down_sql&name=../. Impact is reading local files; no in-field exploit ...
PT-2018-14591 · Phpyun · Phpyun
Name of the Vulnerable Software and Affected Versions: PHPYun version 4.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal. This is possible through the function down sql action in the file /admin/model/database.class.php. The vulnerability can be...
CVE-2018-18626
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...
Design/Logic Flaw
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...
CVE-2018-18626
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...
CVE-2018-18626
The vulnerability CVE-2018-18626 affects PHPYun v4.6, where del_action() mishandles the sql parameter in admin/model/database.class.php, allowing deletion of arbitrary files or directories via admin/index.php?m=database&c=del. Connected sources (Red Hat, CVE listings, PT-Security) confirm the iss...
CVE-2018-18626
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...
Arbitrary File Read Vulnerability in phpyun v4.6
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun v4.6 exists arbitrary file reading vulnerability. An attacker can exploit the vulnerability to read arbitrary files and obtain sensitive serve...
Arbitrary File Deletion Vulnerability in phpyun v4.6
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun v4.6 exists arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...
PHP Cloud Talent System (phpyun) has a code execution vulnerability
PHP cloud talent system phpyun is a PHP and MySQL database to build an efficient open source talent and enterprise job search recruitment, hiring solutions. A code execution vulnerability exists in PHP Cloud Talent System phpyun. The vulnerability is due to the configuration file writing process...
SQL Injection Vulnerability in Phpyun Cloud Talent System /admin/model/hr.class.php File
PHPYun is a Chinese talent operation system with independent intellectual property rights. There is a SQL injection vulnerability in the file /admin/model/hr.class.php of the phpyun cloud talent system, which can be exploited by attackers to obtain database sensitive information...
phpyun talent system version 4.5 reloading vulnerability
PHPYun is a Chinese talent operation system with independent intellectual property rights. PHPYun talent system 4.5 version of the reloading vulnerability, attackers can exploit the vulnerability to cause the site is directly reloaded...
Local File Inclusion Vulnerability in phpyun v4.3.1 Beta
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A local file inclusion vulnerability exists in phpyun v4.3.1 Beta. An attacker can obtain a webshell by including an external php file to execute a...
Code Execution Vulnerability in phpyun v4.3.1 Beta
PHP Cloud Talent System phpyun is an open source talent and enterprise job search and recruitment solution built using PHP and MySQL databases. A code execution vulnerability exists in phpyun v4.3.1 Beta. An attacker can exploit the vulnerability to construct specific code, write to a configurati...
phpyun v4.3.1 Beta has a reinstallation vulnerability
PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A reinstallation vulnerability exists in phpyun v4.3.1 Beta. Allows attackers to exploit the vulnerability to reinstall the system...