32259 matches found
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
Sql injection
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
Arbitrary File Read
nuovo/spreadsheet-reader is vulnerable to an Arbitrary File Read. The library ships with a test.php file in the root-directory, which can be called via a HTTP GET with an arbitrary path as a value for the File parameter, which allows attackers to gain access to an arbitrary file...
PT-2023-20796 · Mccms · Mccms
Name of the Vulnerable Software and Affected Versions: mccms version 2.6 Description: The issue allows remote attackers to run arbitrary SQL commands via the Author Center -Reader Comments -Search function. This can be exploited by accessing the Author Center and then navigating to Reader Comment...
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
PT-2023-23359 · Unknown · Cauldron Cbang
Name of the Vulnerable Software and Affected Versions: Cauldron cbang versions prior to bastet-v8.1.17 Description: The issue allows for directory traversal during extraction, enabling an attacker to create or write to files outside the current directory by using a crafted tar archive. This is du...
编号撤回
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. This CVE number has been withdrawn...
编号撤回
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. This CVE number has been withdrawn...
编号撤回
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. This CVE number has been withdrawn...
编号撤回
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. This CVE number has been withdrawn...
编号撤回
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. This CVE number has been withdrawn...
Foxit PDF Reader < 12.1.2 Multiple Vulnerabilities
According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 12.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...
Vulnerabilities fixed in Foxit PDF Editor and PDF Reader
Foxit has fixed vulnerabilities in its PDF Reader and Editor. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to execute arbitrary code execute with the victim's privileges. This requires the malicious party to trick the victim into opening a malicious file to...
KLA49047 Multiple vulnerabilities in Foxit PDF Reader
Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use After Free vulnerability can be exploited to cause denial of service and execute arbitrary...
CVE-2023-29887
A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter...
CVE-2023-29887
CVE-2023-29887 concerns a Local File Inclusion in Nuovo Spreadsheet Reader 0.5.11, specifically in test.php, allowing an attacker to include arbitrary files via the File parameter. The vulnerability arises from LFI in a PHP library’s test.php file, enabling potential data disclosure (confidential...
spreadsheet-reader 路径遍历漏洞
spreadsheet-reader is Nuovo open source PHP spreadsheet reader. A security vulnerability exists in spreadsheet-reader version 0.5.11, which stems from a local file inclusion vulnerability that allows remote attackers to include arbitrary files via the File parameter...
PT-2023-22458 · Unknown · Spreadsheet-Reader
Name of the Vulnerable Software and Affected Versions: spreadsheet-reader version 0.5.11 Description: A Local File inclusion issue in test.php allows remote attackers to include arbitrary files via the File parameter. This could potentially lead to sensitive information disclosure or other securi...
