28 matches found
CVE-2023-50373
creationtimestamp| type| source ---|---|--- 2024-12-09 14:16:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113623288225669071...
CVE-2024-50237
creationtimestamp| type| source ---|---|--- 2024-11-09 11:49:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113452841447399084 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
Malicious code in opensource-website (npm)
--- -= Per source details. Do not edit below this line.=-...
File Upload Vulnerability in Zhiwei CMS
Knowledge CMS is an open source website builder. A file upload vulnerability exists in Know CMS, which can be exploited by attackers to gain control of the server...
SQL injection vulnerability in the open source version of UX365 website navigation
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...
File Upload Vulnerability on Scarecrow Enterprise Site (CNVD-2020-27175)
Scarecrow Enterprise Station based on PHP + Sqlite/MySQL open source simple and compact free enterprise website system. Scarecrow Enterprise Station has a file upload vulnerability that can be exploited by attackers to gain control of the server...
CVE-2009-10006
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/misc/ufoai.rb 2018-05-29 15:50:33+00:00| seen|...
PHPEasyData 1.5.4 - 'annuaire.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...