618 matches found
CVE-2017-12725
A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...
Zechat SQL Injection Vulnerability
Zechat is a PHP-based online chat application script . A SQL injection vulnerability exists in Zechat version 1.5. A remote attacker can exploit this vulnerability to inject SQL commands...
Wchat Fully Responsive PHP AJAX Chat Script SQL Injection Vulnerability
Wchat Fully Responsive PHP AJAX Chat Script is a responsive online chat script based on PHP and MySQL. A SQL injection vulnerability exists in Wchat Fully Responsive PHP AJAX Chat Script version 1.5. A remote attacker can exploit this vulnerability to inject SQL commands...
Puppet Agent PXP agent code execution vulnerability
Puppet Agent is a set of client tools for viewing configuration files from Puppet Labs in the U.S. Puppet Execution Protocol PXP agent is one of the Puppet Execution Protocol tools. A code execution vulnerability exists in the PXP agent in Puppet Agent versions 1.3.0 through 1.5.x. The...
SQL Injection Vulnerability in Youkai 365 Business v1.5 System
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...
GHSA-85R7-W5MV-C849 Rack Vulnerable to Path Traversal
rack/file.rb Rack::File in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATHINFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path...
NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-32401)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability by sending the 'keyword' parameter to the messages.php file to obtain the...
WordPress WP Jobs Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A cross-site scripting vulnerability exists in version 1.5 of...
Arbitrary file download vulnerability in Yiifcms ZipController.php page
Yiifcms is a content management system CMS developed on the yii framework. An arbitrary file download vulnerability exists in the ZipController.php page of Yiifcms version 1.5. An attacker can exploit this vulnerability to download arbitrary files using the "... /" to jump to a directory to...
NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-27604)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
NexusPHP SQL Injection Vulnerability (CNVD-2017-27285)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the forummanage.php file in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability to obtain database information...
NexusPHP Cross-Site Request Forgery Vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit the vulnerability to send manas or add administrator accounts...
Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site. Independent researcher Scott Gayou has identified eight...
NexusPHP ipsearch.php file cross-site scripting vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending PATHINFO to the ipsearch.php file to obtain the...
CVE-2017-14070
Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to ipsearch.php, related to PHPSELF...
NexusPHP cheaterbox.php file SQL injection vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'delcheater' parameter to the cheaterbox.php file to...
NexusPHP cross-site scripting vulnerability (CNVD-2017-29454)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
NexusPHP SQL Injection Vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. SQL injection vulnerability in the massmail.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...
NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-220460)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...