CVE-2026-82804

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

EUVD-2026-88812

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82804

The Apache DolphinScheduler (versions before 3.4.3 ) is vulnerable to command injection in the Alert Script plugin . The root cause is the incorporation of the scriptPath parameter into a /bin/sh -c command without sufficient neutralization of shell metacharacters. An authenticated user can explo...

CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

PT-2026-102608

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-7272

A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected element is the function generatematlabcode/executematlabcode of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument scriptPath can lead...

CVE-2026-7272: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected element is the function generatematlabcode/executematlabcode of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument scriptPath can lead...

PT-2016-4244

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and is related to the Test Manager for Web Apps in the Oracle Application Testing Suite component. It is claimed by third...

zindizayn-sql.txt

Script's Name : Zindizayn Okul Web Sistemi v1.0 tr Script's MainPage : http://www.okulwebsistemi.com Risk : Medium Found By : ShaFuck31 Thanks : | The RéD | DesquneR | SaboTaqe | ST@ReXT | BLaSTER | Vulnerable file : mezungiris.asp & ogretmenkontrol.asp Vuln :...

VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleVS-Link-Partner = 2.1 scriptpfad Remote File Include Exploit/title script language="JavaScript"...

Fullaspsite Shop (tr) Xss & SqL İnj. VulnZ.

Fullaspsite Shop tr Xss & SqL nj. VulnZ. Found By : ShaFuck31 Risk : Medium VulnZ : Xss & SqL Injection Vuln. : http://victim.com/ScriptPath/listmain.asp?cat=scriptalertdocument.cookie;/script http://victim.com/ScriptPath/listmain.asp?cat= SqL Code GreetZ : BLaSTER , DesquneR , The ReD , Dekolax...

Kolayindir Download Down.ASP SQL注入漏洞

Kolayindir是一款基于ASP的WEB应用程序。 Kolayindir不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Down.ASP'脚本对用户提交的'id'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Kolayindir Download 目前没有解决方案提供： http://www.aspindir.com/goster/4630 http://example.com/ScriptPath/down.asp?id=SqL...

Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Kolayindir Download Yenionline tr Script Download : http://www.aspindir.com/indir.asp?id=4630 Risk : High Found By : ShaFuck31 Vulnerable file : down.asp Vulnerable : http://www.victim.com/ScriptPath/down.asp?id=SqL Contact: ShaFuq31 at HoTMaiL d...

phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities

+------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affected Software .: phpProfiles = 3.1.2b...

CVE-2006-5282

SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...

EUVD-2006-5267

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== SH-News = 3.1 scriptpath Multiple Remote File Include Vulnerabilities ========================================================================...