Lucene search
+L

30 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/30 12:00 a.m.•7 views

CVE-2018-20600: Improper Neutralization of Input During Web Page Generation

sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...

6.1CVSS5.7AI score0.00707EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/30 12:00 a.m.•4 views

PT-2018-15463

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by entering the code during an index.php sadmin fileedit action. Recommendations For UCMS version 1.4.7, consider restricting...

8.8CVSS0.01526EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/30 12:00 a.m.•2 views

PT-2018-15461

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved by exploiting the dir parameter in the "index.php" sadmin fileedit action, allowing for malicious script...

4.8CVSS0.00553EPSS
SaveExploits1References2
OSV
OSV
•added 2018/09/21 6:29 p.m.•21 views

CVE-2018-17320

An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...

6.1CVSS5.8AI score0.00655EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/09/21 6:00 p.m.•40 views

CVE-2018-17320

An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...

6AI score0.00655EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/09/21 12:00 a.m.•4 views

PT-2018-13981

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description An issue was discovered in the software, where the minfo parameter in the sadmin/aindex.php endpoint is vulnerable to stored XSS in the sadmin aaddpost action. Recommendations For UCMS version 1.4.6, avoid using...

6.1CVSS0.00655EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/21 12:00 a.m.•10 views

CVE-2018-17320: Improper Neutralization of Input During Web Page Generation

An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...

6.1CVSS6.3AI score0.00655EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/04/20 12:00 a.m.•5 views

SQL Injection Vulnerability in the Backend of ucms v1.4.5

UCMS is a simple open source content management system. ucms v1.4.5 ucms/ucms/sadmin/cineditpost.php file SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

7.7AI score
SaveExploits0
zdt
zdt
•added 2000/12/01 12:00 a.m.•22 views

Solaris sadmind Remote Buffer Overflow Exploit

Exploit for solaris platform in category remote exploits ============================================== Solaris sadmind Remote Buffer Overflow Exploit ============================================== /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz /...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2000/12/01 12:00 a.m.•27 views

Solaris sadmind - Remote Buffer Overflow

Solaris sadmind - Remote Buffer Overflow /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz / include include include include include char shellsparc = "\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff" "\x90\x03\xe0\x5c\x92\x22\x20\x10\x94\x1b\xc0\x0f"...

1.1AI score
SaveExploits0
Rows per page
Query Builder