CVE-2023-23205

CVE-2023-23205 affects lib60870 v2.3.2 with a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c. CVSS: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 5.5, MEDIUM). Impact: availability is rated HIGH; confidentiality/integrity not affected per the provided metr...

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55712)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statemen...

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55713)

Online Ordering System is a multi-store ordering system that can be used by any small business. an SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/store/index.php?view=edit&id= Lack of validation of external input SQL statements c...

Command Execution Vulnerability in HYBBS V2.3.2 Backend

HYBBS is a lightweight community forum program. A command execution vulnerability exists in the backend of HYBBS V2.3.2. An attacker can exploit this vulnerability to gain server privileges...

Siemens CP 1604 Communications Adapter Detection

Binary data 762016.prm...

CVE-2015-1000008

Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2...

Finecms v2.3.2前台getshell #1 (官网已shell)

简要描述： 看了一下你们以往对漏洞的态度，以及我上一个提交的漏洞的情况，来个狠的，希望不要再忽略了，希望给20 rank。 官方demo已shell。这是第1发。 详细说明： 问题仍然出现在头像上传处。 finecms头像上传代码沿用的phpcms，多的不说，直接看代码吧。 /member/controllers/Account.php 第412行： / 上传头像处理 传入头像压缩包，解压到指定文件夹后删除非图片文件 / public function upload if !isset$GLOBALS'HTTPRAWPOSTDATA' exit'环境不支持'; $dir =...

Finecms v2.3.2前台设计缺陷导致暴力Getshell

简要描述： 权限竞争性上传缺陷。 版本:FineCMS for 海豚大众版 v2.3.2 详细说明： 首先，在phpcms之前的那个上传洞出来的时候，我就注意到finecms升级了一个补丁包。打开一看就是补的类似phpcms的洞，于是我知道finecms在上传头像处用的与phpcms是类似的代码。 然后phpcms后来又出了一个暴力上传的缺陷（ WooYun: PHPCMS前台设计缺陷导致任意代码执行 ），我猜finecms没有补，一来看果然是这样。 先来介绍一下吧，与phpcms类似，finecms对上传头像是这样处理的： 用户上传压缩包 = php解压 = 递归删除非.jpg的文件...