10 matches found
cve-2021-3164
Church Rota versión 2.6.4 es vulnerable a la ejecución remota de código autenticada. El usuario no necesita tener permiso de carga de archivos para cargar y ejecutar un archivo arbitrario. Después de iniciar sesión en Church Rota, envía la siguiente solicitud, reemplazando con tu PHPSESSID:...
EUVD-2017-7405
Malware in sbrugna...
CVE-2021-3164
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...
Design/Logic Flaw
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...
CVE-2021-3164
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...
scotrosselle.flexit.fr XSS vulnerability
Open Bug Bounty ID: OBB-674400 Description| Value ---|--- Affected Website:| scotrosselle.flexit.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| /globalflexit/resources.php?module="...
Sql injection
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...
CVE-2017-15989
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...
CVE-2017-15989
The CVE-2017-15989 entry concerns Online Exam Test Application (PHP-based webapp by phpscriptsmall). The vulnerability is a SQL Injection via the resources.php sort parameter within a category action, as described in multiple sources (NVD/NVD-derived records; CVE pages; exploit references). Affec...