EUVD-2006-5386

Malware in sbrugna...

EUVD-2020-11053

Malware in sbrugna...

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS 4.7.1 and earlier versions have improper access control vulnerabilities. A...

Improper access control

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinalcms/admin/folder/list'...

CVE-2020-19146

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinalcms/admin/folder/list'...

PT-2021-10289

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the TemplatePath parameter in the component "jfinal...

CVE-2020-19146: Improper Limitation of a Pathname to a Restricted Directory

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinalcms/admin/folder/list'...

AROUNDMe0.6.9.txt

============================================== AROUNDMe 0.6.9 remonte file inclusion vendor site: http://barnraiser.org/ vulnerable versions: 0.6.9 and possibly older discovered by: noislet http://www.noislet.org/ vendor informed: 21.10.2006 published: 22.10.2006...

CVE-2006-5533

CVE-2006-5533 pertains to multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9 (and possibly earlier) where, when register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL in the templatePath parameter of template/barnraiser_01/pol_view.tpl.php and ...

CVE-2006-5533: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser01/polview.tpl.php and other unspecified PHP scripts, a...

CVE-2006-5401

CVE-2006-5401 describes a PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php on AROUNDMe 0.5.2 and earlier. The underlying issue allows an attacker to craft a URL for the templatePath parameter to cause arbitrary PHP code execution on affected installations. ...

CVE-2006-5401: Undefined Security Weakness

PHP remote file inclusion vulnerability in template/barnraiser01/pnewpassword.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter...

AROUNDMe <= 0.5.2 (templatePath) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

AROUNDMe 0.5.2 - 'templatePath' Remote File Inclusion

--------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...