17 matches found
EUVD-2025-10694
Malicious code in bioql PyPI...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2025-29150
BlueCMS 1.6 is affected by CVE-2025-29150 via Arbitrary File Deletion caused by abuse of the id parameter in a "/publish.php?act=del" request. The issue potentially enables deletion of files, which can lead to a denial of service. The connected PT-2025-15993 entry documents the affected software/...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2024-31823
CVE-2024-31823 affects Ecommerce-CodeIgniter-Bootstrap due to a code-execution flaw in the Publish.php component’s removeSecondaryImage method (commit d22b54e8915f167a135046ceb857caaf8479c4da). Remote attackers can trigger arbitrary code execution; CVSS 3.1 base score 8.8 (HIGH) with network acce...
Ecommerce-CodeIgniter-Bootstrap 安全漏洞
Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap, which stems from an arbitrary code execution vulnerability in the removeSecondaryImage method of the...
CVE-2021-38329
The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...
Ecommerce CodeIgniter Bootstrap cross-site scripting vulnerability (CNVD-2020-51506)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript.CodeIgniter is an open source web framework written using the PHP language . Ecommerce-CodeIgniter-Bootstrap An XSS vulnerability exists in previous versions of...
idaniki.com XSS vulnerability
Vulnerable URL: http://www.idaniki.com/publish.php?=GR=256'"/alert/xssposed/...
TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date...
TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability
No description provided by source. ----------------------------------------------------------------------------br / TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerabilitybr / ----------------------------------------------------------------------------br / br / Author : Zeni Susanto...
TextPattern 1.19 - publish.php Remote File Inclusion
TextPattern 1.19 - publish.php Remote File Inclusion ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto...
CVE-2006-3037
ST AdManager Lite (publish.php) has multiple XSS vulnerabilities disclosed, allowing remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters. The description specifies the affected software/component and the vulnera...
CVE-2006-3037
Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...