14 matches found
GHSA-532X-J9R7-8F73 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...
CVE-2025-27526 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...
FrogCMS Path Traversal Vulnerability
FrogCms is an HTTP server. A path traversal vulnerability exists in FrogCMS, which stems from a vulnerability in the FileManagerController.php function in FrogCMS version 0.9.5, which can be exploited to perform a directory traversal attack via the GET request urlencode parameter...
Directory traversal
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...
CVE-2020-25872
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...
GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)
In the Pro and Enterprise versions of GTranslate alert123;...
Security update for python-Jinja2 (moderate)
openSUSE Security Update: Security update for python-Jinja2 Announcement ID: openSUSE-SU-2019:0244-1 Rating: moderate References: 858239 Cross-References: CVE-2014-0012 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes one vulnerability is now...
Internet Bug Bounty: integer overflow in urlencode caused heap corruption
Please check: https://bugs.php.net/bug.php?id=72849...
CVE-2014-9367
TWiki 6.0.0 and 6.0.1 are affected by a cross-site scripting (XSS) vulnerability due to an incomplete blacklist in the urlEncode function of lib/TWiki.pm. The issue enables remote attackers to inject arbitrary script via a crafted scope parameter to do/view/TWiki/WebSearch. Impact is browser-exec...
tipaskSQL注入漏洞(无视GPC)
简要描述: 某处过滤不全 再次过滤还是未考虑全 详细说明: function onsearch $qstatus = $status = $this-get3 ? $this-get3 : 1; 1 == $status && $qstatus = "1,2,6,9"; 2 == $status && $qstatus = "2,6"; $word = urldecode$this-post'word' ? strreplace"%27", "", $this-post'word' : $this-get2; !trim$word && $this-message"搜索关键词不能为空!"...
Wind noise CMS4. 0sp5 commercial version of the fatal-vulnerability warning-the black bar safety net
Article author: oldjun&flyh4t script security team Information source: evil octal information security team www.eviloctal.com) Note: the article has been published in the hackers Handbook, by the author of friendship submitted to the evil octal information security team technology Forum, reproduc...
CVE-2006-2219
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...
WD-MKP.txt
!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...