CVE-2017-5188

The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information...

Design/Logic Flaw

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/...

discuz X demo experience package XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability file: source\function\directory most of the files filter is not strict Vulnerability testing:scriptalert/qing DISCUZ x test vulnerability/ Non-secure test the demo: http://fabu.coffly.com/home.php?mod=space&uid=1&do=profile...

PT-2006-5969 · Phpwebsite · Phpwebsite

Name of the Vulnerable Software and Affected Versions: phpWebSite version 0.10.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PHPWS SOURCE DIR parameter in multiple PHP files, including init.php, users.php, Cookie.php, forms.php, Groups.php,...