Lucene search
K

14 matches found

CNNVD
CNNVD
added 2022/03/23 12:0 a.m.2 views

WordPress plugin Ninja Forms - File Uploads Extension 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin for WordPress. WordPress Ninja Forms - File Uploads Extension Plugin...

7.2CVSS5.4AI score0.02022EPSS
Exploits0References3
NVD
NVD
added 2022/03/15 6:15 p.m.11 views

CVE-2022-25487

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php...

9.8CVSS0.83257EPSS
Exploits4References2
Prion
Prion
added 2022/03/15 6:15 p.m.14 views

Remote code execution

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php...

7.5CVSS9.8AI score0.83257EPSS
Exploits4References2Affected Software1
CVE
CVE
added 2022/03/15 5:40 p.m.96 views

CVE-2022-25487

Atom CMS v2.0 contains a remote code execution (RCE) vulnerability exploitable via /admin/uploads.php. The Nuclei template and CIRCL/CVE records confirm the issue stems from improper handling in the uploads path, enabling arbitrary code execution on the affected system. Impact is described as ful...

9.8CVSS9.8AI score0.83257EPSS
In wildExploits4References2Affected Software1
NVD
NVD
added 2020/11/18 4:15 p.m.5 views

CVE-2020-25406

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...

7.5CVSS7.2AI score0.00282EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/11/18 3:51 p.m.13 views

CVE-2020-25406

app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...

7.2AI score0.00282EPSS
Exploits1References1
CVE
CVE
added 2014/07/10 4:0 p.m.32 views

CVE-2014-4852

CVE-2014-4852 describes an SQL injection in The Digital Craft AtomCMS, in the file admin/uploads.php (likely around version 2.0). The vulnerability allows remote attackers to manipulate the database by supplying an arbitrary SQL command via the id parameter, as documented in multiple feeds (NVD, ...

7.5CVSS8.7AI score0.00869EPSS
Exploits1References2Affected Software1
Packet Storm
Packet Storm
added 2009/12/30 12:0 a.m.26 views

Info Fisier 1.0 XSS / SQL Injection

Author : kaozc9 + Email : [email protected] + Site : www.paradisextem.co.cc + Team : ParadisexTeam + Dork : Powered by Info Fisier. =========================================XSS================================================== Affected Files: http://server/path/search.php...

0.7AI score
Exploits0
exploitpack
exploitpack
added 2009/12/27 12:0 a.m.26 views

info fisier 1.0 - Multiple Vulnerabilities

info fisier 1.0 - Multiple Vulnerabilities + Author : kaozc9 + Email : [email protected] + Site : www.paradisextem.co.cc + Team : ParadisexTeam + Dork : Powered by Info Fisier. =========================================XSS================================================== Affected Files:...

0.3AI score
Exploits0
0day.today
0day.today
added 2009/12/27 12:0 a.m.17 views

Info Fisier 1.0 multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Info Fisier 1.0 multiple Vulnerabilities ======================================== + Dork : Powered by Info Fisier...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2007/01/05 2:0 a.m.14 views

CVE-2006-6878

admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights7 parameter to 1 during a login action...

6.9AI score0.06691EPSS
Exploits1References4
seebug.org
seebug.org
added 2006/12/27 12:0 a.m.20 views

PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date =...

7.1AI score
Exploits0
0day.today
0day.today
added 2006/12/26 12:0 a.m.96 views

PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== PHP-Update = 2.7 admin/uploads.php Remote Code Execution Exploit =================================================================== !/usr/bin/perl rgod u fucking little...

7.1AI score
Exploits0
Prion
Prion
added 2006/06/06 8:6 p.m.8 views

Cross site scripting

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

6.8CVSS6.2AI score0.01009EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder