30 matches found
CVE-2018-20600: Improper Neutralization of Input During Web Page Generation
sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmincedit action...
PT-2018-15463
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by entering the code during an index.php sadmin fileedit action. Recommendations For UCMS version 1.4.7, consider restricting...
PT-2018-15461
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved by exploiting the dir parameter in the "index.php" sadmin fileedit action, allowing for malicious script...
CVE-2018-17320
An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...
CVE-2018-17320
An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...
PT-2018-13981
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description An issue was discovered in the software, where the minfo parameter in the sadmin/aindex.php endpoint is vulnerable to stored XSS in the sadmin aaddpost action. Recommendations For UCMS version 1.4.6, avoid using...
CVE-2018-17320: Improper Neutralization of Input During Web Page Generation
An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadminaaddpost action...
SQL Injection Vulnerability in the Backend of ucms v1.4.5
UCMS is a simple open source content management system. ucms v1.4.5 ucms/ucms/sadmin/cineditpost.php file SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
Solaris sadmind Remote Buffer Overflow Exploit
Exploit for solaris platform in category remote exploits ============================================== Solaris sadmind Remote Buffer Overflow Exploit ============================================== /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz /...
Solaris sadmind - Remote Buffer Overflow
Solaris sadmind - Remote Buffer Overflow /\ Super Solaris sadmin Exploit by optyx based on sadminsparc. and sadminx86.c by Cheez Whiz / include include include include include char shellsparc = "\x20\xbf\xff\xff\x20\xbf\xff\xff\x7f\xff\xff\xff" "\x90\x03\xe0\x5c\x92\x22\x20\x10\x94\x1b\xc0\x0f"...