43 matches found
EUVD-2015-7480
Malware in sbrugna...
EUVD-2015-7481
Malware in sbrugna...
EUVD-2015-7479
Malware in sbrugna...
EUVD-2015-7478
Malware in sbrugna...
EUVD-2015-7477
Malicious code in bioql PyPI...
CVE-2015-7567
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
Sql injection
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
CVE-2015-7567
Summary: CVE-2015-7567 is a SQL injection vulnerability in Yeager CMS 1.2.1 that allows remote attackers to execute arbitrary SQL via the "passwordreset&token" parameter. The issue stems from improper input handling in the authentication/password reset flow (root cause: unsafely constructed SQL f...
CVE-2015-7567
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
CVE-2015-7567: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...
PT-2020-7896
Name of the Vulnerable Software and Affected Versions: Yeager CMS version 1.2.1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the passwordreset&token parameter. Recommendations: For Yeager CMS version 1.2.1, avoid using the passwordreset&token...
CVE-2015-7571
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...
Unrestricted file upload
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...
CVE-2015-7571
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...
CVE-2015-7571
The Yeager CMS version 1.2.1 is susceptible to an unrestricted file upload vulnerability (CWE-434). This flaw allows remote attackers to upload files with executable extensions , leading to arbitrary code execution on the target server. The vulnerability is classified as Critical in impact. Remed...
CVE-2015-7571: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension...
PT-2017-7233
Name of the Vulnerable Software and Affected Versions Yeager CMS version 1.2.1 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension, due to an unrestricted file upload vulnerability. Recommendations For Yeager CMS version 1.2.1,...
Server side request forgery (ssrf)
Multiple server-side request forgery SSRF vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodblite/tests/testadodblite.php, libs/org/adodblite/tests/testdatadictionary.php, or...
CVE-2015-7570
Multiple server-side request forgery SSRF vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodblite/tests/testadodblite.php, libs/org/adodblite/tests/testdatadictionary.php, or...