cve-2021-3164

Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. After logging into Church Rota, send the following request, replacing with your PHPSESSID: POST...

EUVD-2017-7405

Malware in sbrugna...

CVE-2021-3164

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...

Design/Logic Flaw

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...

CVE-2021-3164

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...

CVE-2021-3164

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...

CVE-2021-3164: Unrestricted Upload of File with Dangerous Type

ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php...

PT-2021-19456

Name of the Vulnerable Software and Affected Versions ChurchRota version 2.6.4 Description The issue allows for authenticated remote code execution. It is possible to upload and execute an arbitrary file without needing file upload permission, by sending a POST request to the "resources.php" API...

scotrosselle.flexit.fr XSS vulnerability

Open Bug Bounty ID: OBB-674400 Description| Value ---|--- Affected Website:| scotrosselle.flexit.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| /globalflexit/resources.php?module="...

Sql injection

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...

CVE-2017-15989

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...

CVE-2017-15989

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...

CVE-2017-15989

The CVE-2017-15989 entry concerns Online Exam Test Application (PHP-based webapp by phpscriptsmall). The vulnerability is a SQL Injection via the resources.php sort parameter within a category action, as described in multiple sources (NVD/NVD-derived records; CVE pages; exploit references). Affec...

CVE-2017-15989: Improper Neutralization of Special Elements used in an SQL Command

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action...

PT-2017-14344

Name of the Vulnerable Software and Affected Versions Online Exam Test Application affected versions not specified Description The issue allows SQL Injection via the sort parameter in a category action, specifically in the resources.php file. This could potentially lead to unauthorized access to...