EUVD-2018-13034

Malware in sbrugna...

EUVD-2008-2072

Malware in sbrugna...

Pre-School Enrollment System Project update-class-pic.php File Directory Traversal Vulnerability

The Pre-School Enrollment System Project is a preschool enrollment system project. A directory traversal vulnerability exists in Pre-School Enrollment System Project, which stems from a lack of validity checking of paths in the file update-class-pic.php when processing directory requests, and can...

CVE-2025-50349

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php...

CVE-2025-50348

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php...

CVE-2025-50349

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php...

CVE-2025-50348

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php...

CVE-2025-50349: Improper Limitation of a Pathname to a Restricted Directory

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php...

CVE-2025-50348: Improper Limitation of a Pathname to a Restricted Directory

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php...

PT-2019-14982

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue allows for absolute path traversal via the rootpath parameter in the manager/admin pic.php endpoint. Recommendations For joyplus-cms version 1.6.0, consider restricting access to the manager/admi...

Sql injection

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

CVE-2018-20480

CVE-2018-20480 affects S-CMS 1.0. A SQL injection vulnerability exists in the js/pic.php file, exploitable through the P_id parameter. The root cause is improper handling of the P_id input leading to SQL injection. Impact details in the sources indicate potential data exposure/modification, but t...

CVE-2018-20480: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

PT-2018-15405

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description An issue in S-CMS allows SQL Injection via the P id parameter in the "js/pic.php" endpoint. Recommendations For S-CMS version 1.0, avoid using the P id parameter in the "js/pic.php" endpoint until the issue is...

CVE-2018-19228: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation...

PT-2018-14881

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue in LAOBANCMS allows arbitrary file deletion via directory traversal in the "admin/pic.php" endpoint, specifically using the del parameter. This can be exploited to delete sensitive files, such as...

laurisch-architekt.de XSS vulnerability

Open Bug Bounty ID: OBB-636867 Description| Value ---|--- Affected Website:| laurisch-architekt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ufcw496.org XSS vulnerability

Open Bug Bounty ID: OBB-545665 Description| Value ---|--- Affected Website:| ufcw496.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress IMDb Profile Widget 1.0.8 Plugin - Local File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage: https://wordpress.org/plugins/imdb-widget/...

web.ics.purdue.edu XSS vulnerability

Vulnerable URL: http://web.ics.purdue.edu/aepinews/pic.php?pic=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...