8 matches found
CVE-2019-17188
An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php extension. This occurs...
CVE-2019-17188: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php extension. This occurs...
PT-2019-14992
Name of the Vulnerable Software and Affected Versions Fecshop FecMall version 2.3.4 Description An issue was found where an attacker can bypass front-end restrictions and upload PHP code to the webserver. This is done by providing image data with a .php extension and the image/jpeg content type...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018: Improper Neutralization of Special Elements used in an SQL Command
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
PT-2018-15239
Name of the Vulnerable Software and Affected Versions S-CMS version 3.0 Description The issue is related to SQL injection, which can be exploited via the S id parameter. An example of exploitation is demonstrated by the "/1/?type=productinfo&S id=140" URI. Recommendations For S-CMS version 3.0,...
