CVE-2024-51430: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

BIT-ROUNDCUBE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

elFinder Web file manager Version - 2.1.53 Remote Command Execution Vulnerability

Exploit Title: elFinder Web file manager Version: 2.1.53 Remote Command Execution Exploit Author: tmrswrr Google Dork: intitle:"elFinder 2.1.53" Vendor Homepage: https://studio-42.github.io/elFinder/ Software Link: https://github.com/Studio-42/elFinder/archive/refs/tags/2.1.53.zip Version: 2.1.53...

elFinder Web file manager Version - 2.1.53 Remote Command Execution

Exploit Title: elFinder Web file manager Version: 2.1.53 Remote Command Execution Date: 23/11/2023 Exploit Author: tmrswrr Google Dork: intitle:"elFinder 2.1.53" Vendor Homepage: https://studio-42.github.io/elFinder/ Software Link: https://github.com/Studio-42/elFinder/archive/refs/tags/2.1.53.zi...

Arbitrary File Read

nuovo/spreadsheet-reader is vulnerable to an Arbitrary File Read. The library ships with a test.php file in the root-directory, which can be called via a HTTP GET with an arbitrary path as a value for the File parameter, which allows attackers to gain access to an arbitrary file...

CVE-2023-29887: Improper Limitation of a Pathname to a Restricted Directory

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter...

CVE-2023-29887

CVE-2023-29887 concerns a Local File Inclusion in Nuovo Spreadsheet Reader 0.5.11, specifically in test.php, allowing an attacker to include arbitrary files via the File parameter. The vulnerability arises from LFI in a PHP library’s test.php file, enabling potential data disclosure (confidential...

CVE-2023-29887

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter...

CVE-2023-1681

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2023-1681: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

Xunrui CMS security vulnerabilities

Xunrui Cloud Software Development XunRuiCMS Xunrui CMS is an open source content management system CMS from China's Xunrui Cloud Software Development Company. A security vulnerability exists in Xunrui CMS version 4.61, which originates from an unknown function in the /config/myfield/test.php file...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18671

Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

Cross site scripting

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18671

Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

CVE-2020-18671: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Roundcube Mail =1.4.4 via smtp config in /installer/test.php...

CVE-2020-18670: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...