63 matches found
Arbitrary file deletion
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28059
CVE-2022-28059 affects Verydows v2.0 with an arbitrary file deletion vulnerability via \backend\database_controller.php. Connected documents confirm the same flaw across sources, stating an attacker can delete arbitrary files through the referenced path. CVSSv3.1 vectors indicate network access, ...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28058
CVE-2022-28058 affects Verydows v2.0 and enables arbitrary file deletion via the path backend\file_controller.php. The NVD entry reports CVSSv3.1 impact: Confidentiality NONE, Integrity HIGH, Availability HIGH (base score 8.1); exposure via NETWORK with low attack complexity, no user interaction ...
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
Verydows 路径遍历漏洞
Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , an attacker can ackenddatabasecontroller.php for arbitrary file deletion...
Verydows 路径遍历漏洞
Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , the attacker can ackendfilecontroller.php for arbitrary file deletion...
Arbitrary Code Execution Vulnerability in Verydows Backend
Verydows is a completely free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance, high load and security stability. Verydows backend arbitrary code execution vulnerabilities, attackers can exploit the vulnerability to obtain...
File Upload Vulnerability in Verydows 2.0 Backend
Verydows is a free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance and strong security. Verydows 2.0 backend file upload vulnerability, attackers can exploit the vulnerability to obtain server privileges...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
Design/Logic Flaw
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-8363
The CVE-2019-8363 issue affects Verydows 2.0. An XSS vulnerability exists via the index.php?c=main a parameter, demonstrated with a=index[XSS] value. The NVD description confirms this vector and the impact includes reflected/console-like injection in the parameter handling, with CVSS2/3 base scor...
CVE-2019-8363
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter...
CVE-2019-7753
The connected documents confirm CVE-2019-7753 applies to Verydows 2.0, with an XSS vulnerability exposed via the index.php?m=api&c=stats&a=count referrer parameter. Red Hat and NVD entries corroborate this issue, describing an input/referrer parameter that can inject scripts. No public exploit de...