75 matches found
ClipBucket 安全漏洞
ClipBucket is an open-source PHP script developed by MacWarrior. It is available for free download and used to create video-sharing websites. Versions of ClipBucket prior to v5.5.3.359 contained a security vulnerability due to a lack of authorization checks, which could lead to modifying other...
EUVD-2018-18647
Malware in sbrugna...
EUVD-2017-4350
Malware in sbrugna...
EUVD-2017-8807
Malware in sbrugna...
ClipBucket 安全漏洞
ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A security vulnerability exists in ClipBucket 2.6 and earlier versions, which stems from an unauthenticated ofcuploadimage.php endpoint that could lead to arbitrary fil...
PasteShr 1.6 SQL Injection
=========================================================================================== Exploit Title: PasteShr - SQL İnj. Dork: N/A Date: 14-05-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://codecanyon.net/item/pasteshr-text-hosting-sharing-script/23019437 Software Link:...
Sql injection
Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...
CVE-2017-12757
Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...
CVE-2017-12757
Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tech Business Networking Script 8.26i and Tech Caregiver Script 2.71i and Tech Classifieds Script 7.41i and Tech Dating Script 3.40i and Tech Freelancer Script 5.27i and Tech Image...
CVE-2019-7430
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
CVE-2019-7431
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
Directory traversal
PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory...
PHP Scripts Mall Image Sharing Script Directory Traversal Vulnerability
PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. A directory traversal vulnerability exists in PHP Scripts Mall Image Sharing Script 1.3.4. This vulnerability can be exploited to achieve...
PHP Scripts Mall Image Sharing Script HTML Injection Vulnerability
PHP Scripts Mall Image Sharing Script is an image sharing script that can also be used to share digital content such as music, videos, templates and more. PHP Scripts Mall Image Sharing Script 1.3.4 suffers from an HTML injection vulnerability. The vulnerability can be exploited to achieve HTML...
CVE-2019-7431
CVE-2019-7431 affects PHP Scripts Mall Image Sharing Script 1.3.4. The vulnerability is a directory traversal vulnerability exploitable by a direct request to list the uploads directory, enabling access to directory contents. Public sources in the provided set corroborate a path traversal issue b...
CVE-2019-7430
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
Flippy DamnFacts Viral Fun Facts Sharing Script 1.1.0 CSRF / XSS
Exploit Title: Flippy DamnFacts - Viral Fun Facts Sharing Script 1.1.0 - Persistent cross site scripting / Cross site request forgery Date: 2018-05-20 Dork: N/A Exploit Author: borna nematzadeh L0RD Vendor Homepage: https://www.codegrape.com/item/flippy-damnfacts-viral-fun-facts-sharing-script/36...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6902
Affected product: PHP Scripts Mall Image Sharing Script 1.3.3. Vulnerability: Cross-Site Scripting (XSS) via the Full Name field in an Edit Profile action. Root cause/details are not fully described in the provided documents beyond the XSS label. Impact ranges from low to medium according to CVSS...