Trainme Academy 安全漏洞

Trainme Academy is a leading quality education and training solution from Trainme, Inc. A security vulnerability exists in Trainme Academy version v.1.3.2. A remote attacker exploits the vulnerability to obtain sensitive information via the informacion, idcurso, and tit parameters...

CVE-2024-27574

SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters...

CVE-2024-27574: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters...

PT-2024-21956 · Unknown · Trainme Academy

Name of the Vulnerable Software and Affected Versions: Trainme Academy version Ichin v.1.3.2 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the informacion, idcurso, and tit parameters. Recommendations: For Trainme Academy version Ichin...

CVE-2018-20727

Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php...

CVE-2018-20727

CVE-2018-20727 affects NeDi prior to 1.7Cp3. The vulnerability allows authenticated users to perform server-side command execution via user-controlled parameters: flt (Nodes-Traffic.php), dv (Devices-Graph.php), or tit (drawmap.php). This is a command-injection flaw arising from insufficient inpu...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

Design/Logic Flaw

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

CVE-2017-2695 affects Huawei Enjoy 5 (TIT-AL00C583B211): a directory traversal flaw that lets an attacker obtain files from the email application by tricking a user into installing a malicious app and altering a URI. The underlying issue is a URI-based directory traversal in Huawei smartphones. H...

CVE-2017-2735

The CVE-2017-2735 entry relates to TIT-AL00 smartphones with software versions prior to TIT-AL00C583B214, which disclose an exposed system interface vulnerability. The issue arises because the system interface for external applications is not properly restricted, allowing an attacker to trick a u...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2735: Exposed Dangerous Method or Function

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695: Improper Limitation of a Pathname to a Restricted Directory

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

Unfixed XSS vulnerability at www.dennistoun.co.uk

Security researcher TiT, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.dennistoun.co.uk, which at the time of submission ranked 6054163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...

phpbb_wordsearch < = RFi Vulnerabilities

phpbbwordsearch = RFi Vulnerabilities Download : http://www.spacemarc.it/scriptphp/index.php?script=phpbbwordsearch Script Name : phpbbwordsearch Coded By : KaRTaL Contact : k4rtalatgmaildotcom V.Code in : path/rebuildsearchindex/adminrebuildsearch.php require$phpbbrootpath . 'extension.inc';...