-
Men Salon Management System 2.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 13, 2024 | 15:47 pmMen Salon Management System version 2.0 suffers from a php code injection vulnerability.
Read more... -
Auto/Taxi Stand Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 13, 2024 | 15:39 pmAuto/Taxi Stand Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
SPIP BigUp 4.3.1 / 4.2.15 / 4.1.17 Unauthenticated Remote Code Execution
PHP Files ≈ Packet Storm Sep 12, 2024 | 17:22 pmThis Metasploit module exploits a Remote Code Execution vulnerability in the BigUp plugin of SPIP. The vulnerability lies in the lister_fichiers_par_champs function, which is triggered when the bigup_retrouver_fichiers parameter is set to any value. By exploiting the improper handling of[…]
Read more... -
Nipah Virus Testing Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:30 pmNipah Virus Testing Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Emergency Ambulance Hiring Portal 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:26 pmEmergency Ambulance Hiring Portal version 1.0 suffers from a php code injection vulnerability.
Read more... -
COVID19 Testing Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:24 pmCOVID19 Testing Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
BP Monitoring Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:19 pmBP Monitoring Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Art Gallery Management System 1.0 PHP Code Injection
PHP Files ≈ Packet Storm Sep 12, 2024 | 14:15 pmArt Gallery Management System version 1.0 suffers from a php code injection vulnerability.
Read more... -
Ubuntu Security Notice USN-6841-2
PHP Files ≈ Packet Storm Sep 10, 2024 | 16:02 pmUbuntu Security Notice 6841-2 - USN-6841-1 fixed a vulnerability in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. It was discovered that PHP could early return in the filter_var function resulting in invalid[…]
Read more... -
VICIdial Multiple Authenticated SQL Injection
PHP Files ≈ Packet Storm Sep 1, 2024 | 17:22 pmThis Metasploit module exploits several authenticated SQL Inject vulnerabilities in VICIdial 2.14b0.5 prior to svn/trunk revision 3555 (VICIBox 10.0.0, prior to January 20 is vulnerable). Injection point 1 is on vicidial/admin.php when adding a user, in the modify_email_accounts parameter. Injection[…]
Read more...