24 matches found
PT-2022-18873 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.37.x before 1.37.2 Description: A denial-of-service issue was discovered. The rendering of "w/index.php?title=Special:WhatLinksHere&target=Property:P31&namespace=1&invert=1" can take more than thirty seconds, posing a DDo...
PT-2020-12164 · Chadha · Chadha Phpkb Standard Multi-Language
Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to edit a news article, given the id, via a crafted request to the "admin/edit-news.php" endpoint. This is made possible by a CSRF weakness in the software...
PT-2025-26462
Name of the Vulnerable Software and Affected Versions sar2html versions 3.2.2 and prior Description An OS command injection vulnerability exists due to insufficient input validation when processing the plot parameter in the index.php file. Remote, unauthenticated attackers can inject shell comman...
Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability
Description A security vulnerability has been reported in Microsoft Windows XP and Server 2003 operating systems. This issue exists in the Help and Support Center HSC and is due to how the feature handles HCP invocation URIs for DVD driver upgrades. This issue could be exploited from a malicious...