25 matches found
CVE-2017-12756
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile0 parameter...
Commercial up hearing intelligent shop management system advanced Enterprise Edition Free Edition 9. 0 injection vulnerability-vulnerability warning-the black bar safety net
This article from the San ㄗ Feng 訫 locks of love'S Blog Commercial up hearing intelligent shop management system advanced Enterprise Edition Free Edition 9. 0 injection vulnerability This system is very large, the file a lot, I have no one to look after, most of the parameters are SafeRequest...
CVE-2006-6912
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter...
CVE-2006-6912
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter...
smartftp.txt
I found a bug in the SmartFTP-D Server which will give an attacker full access to the server, if he has the right to write files on the server. For every user, the program is checking if a special Userfile exists Sample: Username=hacker & Userfile=hacker.FTPUser. If it exists, the configuration,...