CVE-2023-45878

Gibbon CMS CVE-2023-45878 Exploit This Python script exploits CVE-2023-45878, an unauthenticated arbitrary file upload vulnerability in Gibbon CMS versions 25.0.1 and before, leading to Remote Code Execution RCE. Vulnerability Description CVE-2023-45878 exists in the rubricsvisualisesaveAjax.php...

VulnCheck KEV: CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

PT-2025-11648

Name of the Vulnerable Software and Affected Versions rainrocka xinhu versions 2.6.5 and earlier Description The issue allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function. This can be exploited by providing malicious input to the vulnerable...

CVE-2024-57151: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...