CVE-2019-16706

The CVE-2019-16706 entry concerns kkcms v1.3, where a CSRF vulnerability allows an attacker to add a new user via admin/cms_user_add.php. The vulnerability affects the CMS component responsible for user management and is evidenced by multiple feeds (NVD entry notes CSRF with impact to confidentia...

Design/Logic Flaw

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string...

CVE-2018-20062

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string...

CVE-2018-20062

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string...

CVE-2018-20062

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string. Recent assessments: Assessed Attacker Valu...

Heap overflow

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

Design/Logic Flaw

An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c...

CVE-2018-19093

An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClientsetCommandTerminationHandler in client/clientcontrol.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the clientexamplecontrol program...

Null pointer dereference

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c...

Vehicle Sales Management System - Multiple Vulnerabilities

Vehicle Sales Management System - Multiple Vulnerabilities Exploit Title: VSMS Multiple Vulnerabilities Google Dork: N/A Date: 16-3-2018 Exploit Author: Sing Vendor Homepage: https://sourceforge.net/projects/vsms-php/?source=typredirect Software Link:...

EDUMOD Pro 1.3 - SQL Injection

EDUMOD Pro 1.3 - SQL Injection Exploit Title: School Management System | EDUMOD Pro v1.3 – SQL Injection Date: 02.08.2017 Vendor Homepage: https://codecanyon.net/item/school-management-system-edumod-pro/19764430?srank=288 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

Malware exploit: Filestealer

FileStealer v1.3 Type: Upload vulnerability Author: Xylitol !-- FileStealer v1.3 panel upload vulnerability -- !-- Panel hash: be19e93878130b2f57d42d4dcf5ffcf0 -- form method="POST" action="http://localhost/panel/up.php" enctype="multipart/form-data" File: input type="file" name="file" / br / HWI...

Malware exploit: Filestealer 1.3

FileStealer v1.3 Type: Upload vulnerability Author: Xylitol !-- FileStealer v1.3 panel upload vulnerability -- !-- Panel hash: be19e93878130b2f57d42d4dcf5ffcf0 -- form method="POST" action="http://localhost/panel/up.php" enctype="multipart/form-data" File: input type="file" name="file" / br / HWI...

AppCMS v1.3 在index.php存在信息泄漏漏洞

No description provided by source...

TinyShop越权漏洞

简要描述： 测试版本：V1.3 匿名用户可越权看到部分在后台才能看到的内容，造成严重的信息泄露。 详细说明： 该套程序直接从URL中获取需要渲染的视图文件名，而未做合法性检查。导致匿名用户可以渲染后台视图文件，虽然不能对数据进行操作，但是会造成比较严重的敏感信息泄露。 漏洞证明： /framework/web/controller/controllerclass.php中渲染文件视图的相关代码 通过不断改变act的值，观察输出。 可以得出结论，act的值即视图文件名。那么，如果改成后台目录下的视图，会得到什么结果呢？ 以官方演示站为例，输出了管理员用户名。...

某通用型建站系统SQL注射之十

简要描述： 之十 详细说明： 某通用型建站系统SQL注射之十。 源码：XYCMS律师事务所网站系统v1.3 地址：http://code.it168.com/d-25428.shtml 注入点：showcase.asp?id= 可谷歌搜索：事务 inurl:showcase.asp?id= 实例： http://www.lnsmlv.com/showcase.asp?id=68 http://www.keyels.com/showcase.asp?id=59 http://www.hu-ls.com/showcase.asp?id=166...

CVE-2014-8991

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

bitweaver <= 1.3 (tmpImagePath) Attachment mod_mime Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo bitweaver = v1.3 'tmpImagePath' attachment modmime exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \powered by bitweaver\r\n\r\n; if $argc4 echo Usage: php...

Middle School Homework Page 1.3 Beta 1 - Multiple Vulnerabilities

No description provided by source. Middle School Homework Page V1.3 Beta 1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:...

OpenVMPSd <= 1.3 - Remote Format String Exploit (Multiple Targets)

No description provided by source. / gexp-openvmpsd.c OpenVMPSd v1.3 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-openvmpsd.c / include getopt.h include sys/types.h include...