Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2025/11/26 12:0 a.m.2 views

VulnCheck KEV: CVE-2025-52207

PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory...

9.9CVSS5.9AI score0.0987EPSS
In wildExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-3040

Malware in sbrugna...

9.8CVSS9.5AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/09/13 12:0 a.m.2 views

eCharge Hardy Barth Salia PLCC 代码问题漏洞

The eCharge Hardy Barth Salia PLCC is a charging post controller from eCharge Germany. A code issue vulnerability exists in eCharge Hardy Barth Salia PLCC version 2.2.0, which stems from incorrect manipulation of the parameter setrfidlist in file/api.php, which could lead to arbitrary file upload...

7.5CVSS7.5AI score0.00082EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.1 views

eCharge Hardy Barth Salia PLCC 代码问题漏洞

The eCharge Hardy Barth Salia PLCC is a charging post controller from eCharge Germany. A code issue vulnerability exists in eCharge Hardy Barth Salia PLCC version 2.2.0, which stems from an incorrect manipulation of the parameter media in the file /firmware.php resulting in an unrestricted upload...

6.5CVSS6.6AI score0.00173EPSS
Exploits0References4
NVD
NVD
added 2023/06/23 4:15 p.m.14 views

CVE-2023-36287

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...

6.1CVSS6AI score0.20464EPSS
Exploits1References1
Prion
Prion
added 2023/06/23 4:15 p.m.16 views

Cross site scripting

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter...

5.8CVSS5.9AI score0.20464EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder