23 matches found
EUVD-2025-10694
Malicious code in bioql PyPI...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2025-29150: Improper Input Validation
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2025-29150
BlueCMS version 1.6 is vulnerable to Arbitrary File Deletion due to improper input validation of the id parameter in an /publish.php?act=del request. This vulnerability could potentially lead to a denial of service . As a temporary workaround, users are advised to restrict access to the /publish....
CVE-2025-29150
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
Ecommerce-CodeIgniter-Bootstrap 安全漏洞
Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A security vulnerability exists in Ecommerce-CodeIgniter-Bootstrap, which stems from an arbitrary code execution vulnerability in the removeSecondaryImage method of the...
CVE-2024-31823
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2024-31823
The Ecommerce-CodeIgniter-Bootstrap online store platform (commit v. d22b54e8915f167a135046ceb857caaf8479c4da ) contains an arbitrary code execution vulnerability. The root cause is located in the removeSecondaryImage method of the Publish.php component, which allows a remote attacker to execute ...
CVE-2024-31823: Improper Control of Generation of Code
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the removeSecondaryImage method of the Publish.php component...
CVE-2021-38329
The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...
CVE-2021-38329: Improper Neutralization of Input During Web Page Generation
The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...
Ecommerce CodeIgniter Bootstrap cross-site scripting vulnerability (CNVD-2020-51506)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript.CodeIgniter is an open source web framework written using the PHP language . Ecommerce-CodeIgniter-Bootstrap An XSS vulnerability exists in previous versions of...
CVE-2020-25090: Improper Neutralization of Input During Web Page Generation
Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php...
idaniki.com XSS vulnerability
Vulnerable URL: http://www.idaniki.com/publish.php?=GR=256'"/alert/xssposed/...
TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date...
CVE-2006-5615: Undefined Security Weakness
PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfgtxpath parameter...
TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability
No description provided by source. ----------------------------------------------------------------------------br / TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerabilitybr / ----------------------------------------------------------------------------br / br / Author : Zeni Susanto...
TextPattern 1.19 - publish.php Remote File Inclusion
TextPattern 1.19 - publish.php Remote File Inclusion ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto...