CVE-2018-14441

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

EUVD-2018-6358

Malware in sbrugna...

EUVD-2018-6357

Malware in sbrugna...

CVE-2018-14440

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

CVE-2018-14441

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

Design/Logic Flaw

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

CVE-2018-14441

CVE-2018-14441 describes an arbitrary file upload in the admin/fileUploadAction_fileUpload.action of cckevincyh SSH CompanyWebsite, affected through 2018-05-03. The issue allows uploading a .jsp file with an image/jpeg content type, enabling potential remote code execution via a uploaded JSP, as ...

CVE-2018-14440: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageActionqueryNotice.action noticeInfo parameter...

CVE-2018-14441: Unrestricted Upload of File with Dangerous Type

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

CVE-2018-14441

An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadActionfileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type...

CVE-2018-14440

CVE-2018-14440 describes an SQL injection in the fictional product “cckevincyh SSH CompanyWebsite” affecting versions up to 2018-05-03, reachable via the admin/noticeManageAction_queryNotice.action?noticeInfo parameter. The issue arises from unsanitized input on this parameter, enabling potential...