32 matches found
CVE-2022-50916: Unrestricted Upload of File with Dangerous Type
e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manager import functionality. Attackers can exploit the upload mechanism by manipulating the upload URL parameter to overwrite existing files like top.ph...
UCMS Information Disclosure Vulnerability
UCMS is a content management system written in PHP. UCMS 1.5.0 contains a security vulnerability that stems from an error message returned by the adminchannelscache function in top.php that contains a physical path leak. No details of the vulnerability are currently available...
Code injection
UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...
CVE-2021-25809
UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...
CVE-2021-25809: Generation of Error Message Containing Sensitive Information
UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache function in top.php...
CVE-2018-18789: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php...
zzcms SQL Injection Vulnerability (CNVD-2018-26016)
ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...
Sql injection
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
CVE-2018-1000653: Improper Neutralization of Special Elements used in an SQL Command
zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx...
crosstitch.in XSS vulnerability
Vulnerable URL: http://www.crosstitch.in/top.php?productname=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
AlienVault OSSIM 3.1 Reflected XSS and Blind SQL Injection
No description provided by source. !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the url parameter of top.php. Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user...
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting Blind SQL Injection
Alienvault Open Source SIEM OSSIM 3.1 - Reflected Cross-Site Scripting Blind SQL Injection !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an...
CVE-2012-3835: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...
CVE-2007-1104
The CVE-2007-1104 entry concerns PHP Module Implementation (PHP-MIP) 0.1, specifically a vulnerability in top.php that allows remote attackers to execute arbitrary PHP code via a URL supplied to the laypath parameter (remote file inclusion). The problem is caused by improper handling of the laypa...
PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability
No description provided by source. PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^...
CVE-2007-1104: Undefined Security Weakness
PHP remote file inclusion vulnerability in top.php in PHP Module Implementation PHP-MIP 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the laypath parameter...
PHP-MIP 0.1 - top.php?laypath Remote File Inclusion
PHP-MIP 0.1 - top.php?laypath Remote File Inclusion PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Lin...
PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== PHP-MIP 0.1 top.php laypath Remote File Include Vulnerability =============================================================== PHP Module Implementationtop.php laypathRemote Fi...
PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion
PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit: ^...
CVE-2007-0497: Undefined Security Weakness
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...