| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-5457 | 7.5 | PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allows remote attackers to execute arbitrary code by uploading a crafted file, as demonstrated by a file named foo.php.php. | 2018-10-09 19:57:00 | 2015-07-08 15:59:00 |
| CVE-2015-5456 | 4.3 | Cross-site scripting (XSS) vulnerability in the form method in modules/formclass.php in PivotX before 2.3.11 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable and form actions. | 2018-10-09 19:57:00 | 2015-07-08 15:59:00 |
| CVE-2015-5353 | 7.5 | Directory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tab parameter to admin/. | 2018-10-09 19:57:00 | 2015-07-01 16:59:00 |
| CVE-2015-5066 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) content or (2) title field in an add action in the posts page to index.php or the (3) q par | 2018-10-09 19:57:00 | 2015-06-24 14:59:00 |
| CVE-2015-5064 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in MySql Lite Administrator (mysql-lite-administrator) beta-1 allow remote attackers to inject arbitrary web script or HTML via the table_name parameter to (1) tabella.php, (2) coloni.php, or (3) in | 2018-10-09 19:57:00 | 2015-06-24 14:59:00 |
| CVE-2015-5063 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username or (2) admin_password parameter to install.php. | 2018-10-09 19:57:00 | 2015-06-24 14:59:00 |
| CVE-2015-5062 | 5.8 | Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build. | 2018-10-09 19:57:00 | 2015-06-24 14:59:00 |
| CVE-2015-4119 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the authentication of (1) administrators for requests that create an administrator account via a request to admin/users_edit.php | 2018-10-09 19:57:00 | 2015-06-15 15:59:00 |
| CVE-2015-4118 | 6.5 | SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users with monitor permissions to execute arbitrary SQL commands via the server parameter. NOTE: this can be leveraged by remote atta | 2018-10-09 19:57:00 | 2015-06-15 15:59:00 |
| CVE-2015-4153 | 5.0 | Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin | 2018-10-09 19:57:00 | 2015-06-10 18:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: