CVE-2021-25004

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin...

Ampache 跨站脚本漏洞

Ampache is a web-based audio/video application and file manager. A security vulnerability exists in Ampache, which stems from an easy code injection in random.php due to the lack of input filtering version 4.x...

CVE-2007-0517

Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password information via a direct request for pwd.txt...