Lucene search
K

14 matches found

OSV
OSV
added 2025/05/28 9:31 a.m.2 views

GHSA-532X-J9R7-8F73 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS7AI score0.00395EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/05/28 9:31 a.m.10 views

Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncode and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.5CVSS6.8AI score0.00395EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/28 8:7 a.m.12 views

CVE-2025-27526 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick 1 to solve it...

6.9AI score0.00395EPSS
Exploits0References2
CNVD
CNVD
added 2021/11/02 12:0 a.m.13 views

FrogCMS Path Traversal Vulnerability

FrogCms is an HTTP server. A path traversal vulnerability exists in FrogCMS, which stems from a vulnerability in the FileManagerController.php function in FrogCMS version 0.9.5, which can be exploited to perform a directory traversal attack via the GET request urlencode parameter...

4.9CVSS5.1AI score0.0045EPSS
Exploits1References1
Prion
Prion
added 2021/10/29 8:15 p.m.11 views

Directory traversal

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

4CVSS5AI score0.0045EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/10/29 7:11 p.m.11 views

CVE-2020-25872

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter...

5AI score0.0045EPSS
Exploits1References1
wpexploit
wpexploit
added 2021/07/23 12:0 a.m.163 views

GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)

In the Pro and Enterprise versions of GTranslate alert123;...

4.3CVSS1.6AI score0.02674EPSS
Exploits2References1
OPENSUSE Linux
OPENSUSE Linux
added 2019/02/25 12:0 a.m.124 views

Security update for python-Jinja2 (moderate)

openSUSE Security Update: Security update for python-Jinja2 Announcement ID: openSUSE-SU-2019:0244-1 Rating: moderate References: 858239 Cross-References: CVE-2014-0012 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes one vulnerability is now...

4.4CVSS7.2AI score0.00101EPSS
Exploits1References1
Hacker One
Hacker One
added 2016/08/17 7:11 a.m.17 views

Internet Bug Bounty: integer overflow in urlencode caused heap corruption

Please check: https://bugs.php.net/bug.php?id=72849...

6.9AI score
Exploits0
CVE
CVE
added 2014/12/31 9:0 p.m.57 views

CVE-2014-9367

TWiki 6.0.0 and 6.0.1 are affected by a cross-site scripting (XSS) vulnerability due to an incomplete blacklist in the urlEncode function of lib/TWiki.pm. The issue enables remote attackers to inject arbitrary script via a crafted scope parameter to do/view/TWiki/WebSearch. Impact is browser-exec...

4.3CVSS5.8AI score0.00336EPSS
Exploits2References4Affected Software1
seebug.org
seebug.org
added 2014/04/06 12:0 a.m.23 views

tipaskSQL注入漏洞(无视GPC)

简要描述: 某处过滤不全 再次过滤还是未考虑全 详细说明: function onsearch $qstatus = $status = $this-get3 ? $this-get3 : 1; 1 == $status && $qstatus = "1,2,6,9"; 2 == $status && $qstatus = "2,6"; $word = urldecode$this-post'word' ? strreplace"%27", "", $this-post'word' : $this-get2; !trim$word && $this-message"搜索关键词不能为空!"...

7.2AI score
Exploits0
myhack58
myhack58
added 2008/07/11 12:0 a.m.15 views

Wind noise CMS4. 0sp5 commercial version of the fatal-vulnerability warning-the black bar safety net

Article author: oldjun&flyh4t script security team Information source: evil octal information security team www.eviloctal.com) Note: the article has been published in the hackers Handbook, by the author of friendship submitted to the evil octal information security team technology Forum, reproduc...

7.3AI score
Exploits0
UbuntuCve
UbuntuCve
added 2007/02/08 5:28 p.m.20 views

CVE-2006-2219

phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attackers to obtain sensitive information, as demonstrated by the 1 mode parameter to memberlist.php and the 2 highlight parameter to viewtopic.php that are used a...

5CVSS5.9AI score0.00911EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2006/06/29 12:0 a.m.30 views

WD-MKP.txt

!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...

7.4AI score
Exploits0
Rows per page
Query Builder