192 matches found
UBUNTU-CVE-2017-15671
The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27, when invoked with GLOBTILDE, could skip freeing allocated memory when processing the operator with a long user name, potentially leading to a denial of service memory leak...
UBUNTU-CVE-2017-15670
The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...
Tilde CMS Information Disclosure Vulnerability
Tilde CMS is a web content management system CMS. A security vulnerability exists in Tilde CMS version 1.0.1. An attacker can exploit the vulnerability by using direct references to retrieve sensitive data and download local PHP resources e.g., admin/content.php and...
Tilde CMS class.SystemAction.php file SQL injection vulnerability
Tilde CMS is a web content management system CMS. A SQL injection vulnerability exists in the class.SystemAction.php file in Tilde CMS version 1.0.1. A remote attacker can exploit this vulnerability by sending a POST request to /actionphp/action.input.php with the 'id' parameter to execute...
Tilde CMS Path Traversal Vulnerability
Tilde CMS is a web content management system CMS. A path traversal vulnerability exists in Tilde CMS version 1.0.1. An attacker can exploit this vulnerability by sending a 'file' parameter file to actionphp/download.File.php with a '. /' to actionphp/download.File.php with the 'file' parameter...
CVE-2017-11327
An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...
CVE-2017-11324
An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter...
Sql injection
An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter...
CVE-2017-11325
An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php...
Code injection
An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php...
CVE-2017-11325
An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php...
CVE-2017-11327
An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...
Design/Logic Flaw
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation...
CVE-2017-11324
An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter...
CVE-2017-11326
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation...
Design/Logic Flaw
An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...
CVE-2017-11326
An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation...
CVE-2017-11324
CVE-2017-11324 (Tilde CMS 1.0.1) : A SQL injection exists in the class.SystemAction.php file due to missing escaping of the backtick character. An attacker can trigger the vulnerability via a POST request to /actionphp/action.input.php with the id parameter, potentially allowing arbitrary SQL com...
CVE-2017-11325
CVE-2017-11325 affects Tilde CMS 1.0.1. The vulnerability is a path-traversal in the download.File.php handler reachable via the file parameter (file=../), allowing an attacker to read arbitrary files. This aligns with the CVE description: Arbitrary files can be read via a file=../ attack on acti...
