PHPGURUKUL Zoo Management System SQL注入漏洞

PHPGURUKUL Zoo Management System is a zoo management system from the PHPGurukul Phpgurukul team. PHPGURUKUL Zoo Management System v1.0 is vulnerable to SQL injection, which stems from a lack of filtering in the classid parameter in /publichtml/animals, and can be exploited by attackers to execute...

DEBIAN-CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001: Incorrect Default Permissions

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

glFusion CMS Licensing Issue Vulnerability

GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...

CVE-2021-44949

glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...

CVE-2021-44949

glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...

CVE-2021-44949

glFusion CMS 1.7.9 is affected by an access control vulnerability via /publichtml/users.php...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

CVE-2021-44935

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...

CVE-2021-44937

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /publichtml/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied...

CVE-2021-44935

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...

GlFusion Cms 访问控制错误漏洞

glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...

GlFusion Cms 授权问题漏洞

GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...

CVE-2018-12256

admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...

CVE-2018-10827

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

CVE-2018-10827: Uncontrolled Resource Consumption

LiteCart before 2.1.2 allows remote attackers to cause a denial of service memory consumption via URIs that do not exist, because publichtml/logs/notfound.log grows without bound, and is loaded into memory for each request...

CVE-2016-4849

Multiple cross-site scripting XSS vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COMgetCurrentURL function in 1 publichtml/layout/default/header.thtml, 2 publichtml/layout/bento/header.thtml, 3...

CVE-2016-4849

Multiple cross-site scripting XSS vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COMgetCurrentURL function in 1 publichtml/layout/default/header.thtml, 2 publichtml/layout/bento/header.thtml, 3...