PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14 when RG_EMULATION is enabled in configuration.php allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.


PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path parameter.


PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0 1.1 1.11 and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the inc_function parameter.


PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the gorumDir parameter.


PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter.


PHP

remote

file

inclusion

vulnerability

in

in

MODx

CMS

and

earlier

when

is

disabled

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

parameter.


PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.


PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter.


PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.


PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter.


PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.


PHP

remote

file

inclusion

vulnerability

in

in

TECHNOTE

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

parameter.


PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier and possibly other versions before 0.05 allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter.


PHP remote file inclusion vulnerability in header.php in Concord Asset Software and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.


PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter.


PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter.


PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.


PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footer_file parameter.


PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter.


PHP

remote

file

inclusion

vulnerability

in

in

WebBiscuits

Software

Events

Calendar

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

pathdocroot

and

component

parameters.


PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter.


PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter a different issue than CVE-2008-6316.


PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter.


PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mj_configsrc_path parameter.


PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mod_dir parameter.


PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the API_HOME_DIR parameter.


PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova possibly 0.8 sp1 allows remote attackers to execute arbitrary PHP code via a URL in the ugamela_root_path parameter.


PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter.


PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter.


PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_op parameter.


PHP

remote

file

inclusion

vulnerability

in

in

OpenRat

and

earlier

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

parameter.


PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova possibly 0.8 sp1 allows remote attackers to execute arbitrary PHP code via a URL in the xnova_root_path parameter.


PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter a different vector than CVE-2008-6317.


PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php.


PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.


PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the _settingspluginpath parameter.


PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla! when register_globals is enabled allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter.


PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfig_absolute_path parameter.


PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSroot_dir parameter.


PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.


PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter.


PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the dir_inc parameter.


PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar when magic_quotes_gpc is disabled allows remote attackers to execute arbitrary PHP code via a URL in the v parameter.


PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the evacaminho parameter to index.php.


PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter. NOTE: this might be related to CVE-2005-2255.1.


PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter.


PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter.


PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a e}sher when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter.


PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPT_Configdirdata parameter.


PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attackers to execute arbitrary PHP code via a URL in unspecified vectors that modify the _smarty_compile_path variable in the fetch function.


PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter.


PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the base_archivo parameter.


PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.


PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter.


PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter.


PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter.


PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter.


PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abg_path parameter.


PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter.


PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the include_page parameter.


PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.


PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.


PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via the include_directory parameter.


PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.


PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgsLanguage parameter a different vector than CVE-2006-4477 and CVE-2004-0132.


PHP

remote

file

inclusion

vulnerability

in

in

Cyberfolio

when

is

enabled

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

rep

parameter.


PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter.


PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.


PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information.


PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the read_xml_include parameter.


PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter a different vector than CVE-2007-1483.


PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfig_authsmf_path parameter.


PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.


PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjm_dir parameter.


PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the _pages_dir parameter.


PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the mod_root parameter.


PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter.


PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter.


PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter.


PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.


PHP remote file inclusion vulnerability in admin/templates/template_thumbnail.php in HomePH Design 2.10 RC2 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the thumb_template parameter.


PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter a different vulnerability than CVE-2006-5588 and CVE-2006-3185.


PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.


PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter.


PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php and (2) checkout.php.


PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter.


PHP

remote

file

inclusion

vulnerability

in

in

Connectix

Boards

and

earlier

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

parameter.


PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_public_program parameter.


PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter.


PHP

remote

file

inclusion

vulnerability

in

in

Agares

phpAutoVideo

and

earlier

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

loadpage

parameter

a

different

vector

than


PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS when register_globals is disabled allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.


PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hlp parameter.


PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execute arbitrary PHP code via a URL in the libcurlemuinc parameter.


PHP remote file inclusion vulnerability in common/db.php in samPHPweb possibly 4.2.2 and others as provided with SAM Broadcaster allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter.


PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter.


PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter.


PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the extmanager_install parameter.


PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.


PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the opfooter_body parameter.


PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter.


PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter.


PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter.


PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter.


PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php.


PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.


PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter.


PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPEND_FILE parameter.


PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.


PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.


PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIGfilesfunctions_page parameter.


PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.


PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107 when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.


PHP

remote

file

inclusion

vulnerability

in

in

PhpBlock

allows

remote

attackers

to

execute

arbitrary

PHP

code

via

a

URL

in

the

parameter.


PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter.


PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.


PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.


PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.

remote file inclusion
arbitrary code execution


PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.


PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitrary code via a URL in the page parameter.


PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relative_script_path parameter.


PHP remote file inclusion vulnerability in VBulletin 3.5.1 3.5.2 and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php (2) ImpExController.php and (3) ImpExDisplay.php.


PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3 when register_globals is enabled allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter which satisfies the file_exists function call.


PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier Gold 7.63 and earlier and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.


PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter.


PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter.


PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.


PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execute arbitrary code via a URL in the inc_dir parameter a different vector than CVE-2006-1922.


PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter.


PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via \URL manipulation.\


PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter.


PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.


PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.


PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php (2) clmcpreload.php (3) mcconfig.php or (4) mcpi-demo.php.


PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.


PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter a variant of CVE-2001-1468.


PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.


PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configppa_root_path variable.


PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.


PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter.

remote file inclusion
arbitrary command execution


PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting (XSS) attacks via a URL in the page parameter.

remote file inclusion
cross site scripting


PHP

remote

file

inclusion

in

the

method

in

in

before

allows

remote

code

execution.

remote file inclusion
remote code execution


IBM WebSphere Portal 7.0 8.0 8.5 and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.


In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4 a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Microkernel (TMM) process.


Under certain conditions Solution Manager version 7.2 allows an attacker to access information which would otherwise be restricted.


Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) versions 4.2 and 4.3 allows an attacker to access information which would otherwise be restricted.


Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5 7.51 7.52 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.


Under certain conditions SAP Business One Mobile Android App version 1.2.12 allows an attacker to access information which would otherwise be restricted.


Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.


Under certain conditions SAP NetWeaver AS Java (corrected in 7.10 7.20 7.30 7.31 7.40 7.50) allows an attacker to access information which would otherwise be restricted.


Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server) versions 4.2 and 4.3 allows an attacker to access information which would otherwise be restricted.


Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege.


Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege.


Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege.


Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege.


Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege.


Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege.


IBM QRadar SIEM 7.3 7.4 and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021


MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie which reveals the installation path in an error message.


In OpenStack Heat by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. Affected versions are <=5.0.3 >=6.0.0 <=6.1.0 and ==7.0.0.


IBM WebSphere Portal 7.0 8.0 8.5 and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.


In tesseract 2.03 and 2.04 an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.


OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c).


In all Qualcomm products with Android releases from CAF using the Linux kernel a rollback vulnerability potentially exists in Full Disk Encryption.


IBM InfoSphere DataStage 8.1 8.5 8.7 9.1 and 11.3 through 11.3.1.2 on UNIX allows local users to write to executable files and consequently obtain root privileges via unspecified vectors.


IBM i OSPF 6.1 7.1 7.2 and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA which may lead to loss of connectivity. IBM X-Force ID: 128379.


The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel the UPnP daemon should not be running out of box because it enables port forwarding without authentication.


A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.


A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.

sandbox bypass vulnerability
arbitrary code execution


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.


A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.


A

sandbox

bypass

vulnerability

exists

in

Jenkins

Matrix

Project

Plugin

and

earlier

in

pom.xml

that

allows

attackers

with

Job/Configure

permission

to

execute

arbitrary

code

on

the

Jenkins

master

JVM.


A

sandbox

bypass

vulnerability

exists

in

Jenkins

Groovy

Plugin

and

earlier

in

pom.xml

that

allows

attackers

with

Overall/Read

permission

to

execute

arbitrary

code

on

the

Jenkins

master

JVM.


A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.


Adobe Acrobat and Reader 2018.011.20040 and earlier 2017.011.30080 and earlier and 2015.006.30418 and earlier versions have a Security Bypass vulnerability. Successful exploitation could lead to privilege escalation.


Adobe Acrobat and Reader versions 2018.011.20063 and earlier 2017.011.30102 and earlier and 2015.006.30452 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.


Adobe Acrobat and Reader versions 2019.010.20064 and earlier 2019.010.20064 and earlier 2017.011.30110 and earlier version and 2015.006.30461 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.


Adobe Acrobat and Reader versions 2020.006.20042 and earlier 2017.011.30166 and earlier 2017.011.30166 and earlier and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.


Adobe Acrobat and Reader versions 2020.009.20074 and earlier 2020.001.30002 2017.011.30171 and earlier and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.


Adobe Acrobat and Reader versions 2020.009.20074 and earlier 2020.001.30002 2017.011.30171 and earlier and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation .


Adobe s 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have a security bypass vulnerability when manipulating Form Data Format (FDF).


IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.


IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment users or associated data. IBM X-Force ID: 165949.


IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML allowing attackers to modify the syntax content or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.

improper neutralization of special elements


IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953.


IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.


IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.

incomplete blacklist for input validation


IBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 165813.


IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.


IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.

execute command to crash administration tool


IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs referer header or browser history. IBM X-Force ID: 166623.


A security feature bypass vulnerability exists in Dynamics On Premise aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.


A security feature bypass exists in Azure SSH Keypairs due to a change in the provisioning logic for some Linux images that use cloud-init aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys) aka 'Windows Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.


A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file which could trick the victim into entering credentials aka 'Microsoft Office Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings aka \Internet Explorer Security Feature Bypass Vulnerability.\


A security feature bypass vulnerability exists in Windows 10 1607 Windows Server 2012 R2 and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests aka \ADFS Security Feature Bypass Vulnerability.\


A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats aka \Microsoft Office Security Feature Bypass Vulnerability\.


A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins aka \Microsoft Edge Security Feature Bypass Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.


A security feature bypass exists when Windows incorrectly validates kernel driver signatures aka \Windows Security Feature Bypass Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-1035.


A security feature bypass exists when Device Guard incorrectly validates an untrusted file aka \Device Guard Security Feature Bypass Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption aka \BitLocker Security Feature Bypass Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers.


A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages aka \Lync for Mac 2011 Security Feature Bypass Vulnerability.\ This affects Microsoft Lync.


A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source aka \Windows Hyper-V Security Feature Bypass Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging (MOTW) aka \Internet Explorer Security Feature Bypass Vulnerability.\ This affects Internet Explorer 11.


A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies aka \Internet Explorer Security Feature Bypass Vulnerability.\ This affects Internet Explorer 11.


A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments aka \Microsoft Outlook Security Feature Bypass Vulnerability.\ This affects Microsoft Office.


A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests aka \Microsoft Edge Security Feature Bypass Vulnerability.\ This affects Microsoft Edge.


A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages aka \Skype for Business and Lync Security Feature Bypass Vulnerability.\ This affects Skype Microsoft Lync.


A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed aka \Scripting Engine Security Feature Bypass Vulnerability.\ This affects Microsoft Edge ChakraCore.


A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins aka \Microsoft Edge Security Feature Bypass Vulnerability.\ This affects Microsoft Edge.


A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity aka \Windows Subsystem for Linux Security Feature Bypass Vulnerability.\ This affects Windows 10 Windows 10 Servers.


A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings aka \Active Directory Security Feature Bypass Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard aka \Windows Security Feature Bypass Vulnerability.\ This affects Windows 10 Windows 10 Servers.


A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files aka 'Microsoft Word Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in the PowerShellGet V2 module aka 'PowerShellGet Module WDAC Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections aka 'Projected Filesystem Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in secure boot aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Surface Hub when prompting for credentials aka 'Surface Hub Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update aka 'Windows Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged aka 'Windows Host Guardian Service Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly validates attachments uploaded to reports aka 'SQL Server Reporting Services Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file which could trick the victim into entering credentials aka 'Microsoft Office Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses aka 'Windows NTLM Security Feature Bypass Vulnerability'.


A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality aka 'Windows Secure Boot Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory.To exploit the vulnerability a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system aka 'Windows Secure Kernel Mode Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy is applied to Yammer App. aka 'Microsoft Yammer Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file which could lead to a standard user any AppContainer sandbox and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug an attacker would have to run a specially crafted file aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen aka 'Windows 10 Mobile Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses. aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.


A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627 CVE-2019-0631.


A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins aka 'Microsoft Browsers Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries aka 'Internet Explorer Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631 CVE-2019-0632.


A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting aka 'Microsoft Edge Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself this bypass vulnerability does not allow arbitrary code execution aka 'Microsoft Edge Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.


A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627 CVE-2019-0632.


A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions and to allow requests that should otherwise be ignored aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0761.


A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.

security feature bypass
remote code execution
escalated privilege


When SWFTools 0.9.2 processes a crafted file in wav2swf it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c.


When SWFTools 0.9.2 processes a crafted file in png2swf it can lead to a Segmentation Violation in the png_load() function in lib/png.c.


The sell function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for EthereumLegit an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Welfare Token Fund (WTF) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The _sell function of a smart contract implementation for GROWCHAIN (GROW) an Ethereum token has an integer overflow.


The sell function of a smart contract implementation for GreenMed (GRMD) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MoneyChainNet (MCN) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for GSI an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MyBO an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ProvidenceCasino (PVE) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for PornCoin (PRNC) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ObjectToken (OBJ) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for TravelCoin (TRV) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for T-Swap-Token (T-S-T) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for CoinToken an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for YLCToken an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for DestiNeed (DSN) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for TiTok - Ticket Token (Contract Name: MyAdvancedToken7) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Crowdnext (CNX) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ohni_2 (OHNI) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for STeX Exchange ICO (STE) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MAVCash an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MyToken an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Nectar (NCTR) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for Providence Crypto Casino (PVE) (Contract Name: ProvidenceCasinoToken) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MoneyTree (TREE) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for GMile an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for MyYLC an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for DateMe (DMX) (Contract Name: ProgressiveToken) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for RiptideCoin (RIPT) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ICO Dollar (ICOD) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ETHERCASH (ETC) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


The sell function of a smart contract implementation for ETHEREUMBLACK (ETCBK) an Ethereum token has an integer overflow in which \amount * sellPrice\ can be zero consequently reducing a seller's assets.


A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the affected software. An attacker could exploit this vulnerability by sending malicious requests to the affected system. A successful exploit could allow the attacker to send arbitrary network requests sourced from the affected system.


IBM WebSphere MQ 7.5 8.0 and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer be transmitted via the affected channel. IBM X-Force ID: 141339.


IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008.


Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords.


In all versions of GitLab CE/EE since version 8.0 a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.


A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.


A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.


A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints.


SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information attack intranet hosts or possibly trigger remote command execution via the upfile parameter.


SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter related to use of the discontinued aheinze/fetch_url_contents component.


SSRF

(Server

Side

Request

Forgery)

in

tpshop

and

allows

remote

attackers

to

obtain

sensitive

information

attack

intranet

hosts

or

possibly

trigger

remote

command

execution

via

the

fBill

parameter.


A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping of the internal network because of URL functionality on the File Manager page.


Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-24085.


Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-41349.


Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-1730.


Microsoft Exchange Server Spoofing Vulnerability


Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-42305.


Microsoft Exchange Server Spoofing Vulnerability.


A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php.


A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services often potentially leading to the attacker executing commands on the server.


A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.


A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.


A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.


A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.


A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.


A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.


A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.


A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.


A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras which could lead to proxied network scans.


A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task.


A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5 via the 'source' parameter.


A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open a connection to the machine via the deviceIpAddr and connPort parameters.


A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer.

server-side request forgery
ssrf
arbitrary code execution


A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.

server-side request forgery
ssrf
information disclosure


A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a sweep.


Session fixation vulnerability in Fujitsu e-Pares V01 L01 L03 L10 L20 L30 allows remote attackers to hijack web sessions via unspecified vectors.


A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15 on EX Series; 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13 15.1R7-S5; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238; 16.1 versions prior to 16.1R4-S13 16.1R7-S5; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R2-S8 17.2R3-S3; 17.3 versions prior to 17.3R3-S5; 17.4 versions prior to 17.4R2-S8 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S2 19.1R2.


A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.


An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.


A session fixation vulnerability was discovered in Ice Hrm 29.0.0 OS which allows an attacker to hijack a valid user session via a crafted session cookie.


A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.


A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.


A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.


A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges.


Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.


Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL.


Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the host through the remote avatar upload function.


Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.


Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors.


Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.


Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.


Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors.


Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap app. Administration role is necessary for exploitation.


Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.


Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter.


Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.


Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.


Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.


Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.


Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.


Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.


Server-Side

Request

Forgery

(SSRF)

in

GitHub

repository

chocobozzz/peertube

prior

to


Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.


Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie request to private area or lead to xss...


Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.


Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to download arbitrary local files via the url parameter.


Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.


Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.


Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI.


Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.


Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL.


Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.


Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.


Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.


Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.


Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action to the secondlinepodcastimport page.


Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor you can upload pictures of remote websites.


Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS requests to arbitrary domains via carefully constructed XML files loaded by an ePO administrator.


Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.


Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs.


Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function.


Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.

side request forgery
arbitrary code execution


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467 CVE-2022-24468 CVE-2022-24470 CVE-2022-24517 CVE-2022-24520.

site recovery remote
remote code execution


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467 CVE-2022-24468 CVE-2022-24470 CVE-2022-24471 CVE-2022-24517.


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467 CVE-2022-24470 CVE-2022-24471 CVE-2022-24517 CVE-2022-24520.


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467 CVE-2022-24468 CVE-2022-24471 CVE-2022-24517 CVE-2022-24520.


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467 CVE-2022-24468 CVE-2022-24470 CVE-2022-24471 CVE-2022-24520.


Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24468 CVE-2022-24470 CVE-2022-24471 CVE-2022-24517 CVE-2022-24520.


Azure Site Recovery Remote Code Execution Vulnerability.


Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.


Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.


Cross

Site

Request

Forgery

(CSRF)

vulnerability

exist

in

PopojiCMS

in

po-admin/route.php?mod=user&act=multidelete.


Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column.


Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.


Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0 allows attackers to change the password to an arbitrary account.


Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials.


Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordPress because the HTTP Referer header is not checked.


Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.


Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.


Cross

Site

Request

Forgery

(CSRF)

exists

in

Photography

CMS

via

as

demonstrated

by

adding

an

admin

account.


Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php as demonstrated by modifying the admin password.


Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php.


Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.


Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields to WebUI.


Cross

Site

Request

Forgery

(CSRF)

vulnerability

exists

in

Eyoucms

that

can

add

an

admin

account

via

/login.php?m=admin&c=Admin&a=admin_add&lang=cn.


Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content.


Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background which could let a remote malicious gain privileges.


Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php which can let a malicious user delete movie information.


Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.


Cross

Site

Request

Forgery

(CSRF)

in

JuQingCMS

allows

remote

attackers

to

gain

local

privileges

via

the

component

\JuQingCMS_v1.0/admin/index.php?c=administrator&a=add\.


Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.


Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component \/admin/profile/save_profile\.


Cross

Site

Request

Forgery

(CSRF)

vulnerability

in

bycms

via


Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php which can let a malicious user delete a video message.


Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.


Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html.


Cross

Site

Request

Forgery

(CSRF)

vulnerability

exists

in

EyouCMS

that

can

add

an

htm

page

to

execute

the

js

code

via

login.php?m=admin&c=Filemanager&a=newfile&lang=cn.


Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.


Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.


Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.


Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.


Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php which could let a malicious user add an admin account.


Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests which can lead to other vulnerabilities.


Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space.


Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.

site request forgery
arbitrary code execution


Cross

Site

Request

Forgery

(CSRF)

in

Simple-Log

allows

remote

attackers

to

gain

privilege

and

execute

arbitrary

code

via

the

component

\Simple-Log/admin/admin.php?act=act_add_member\.


Cross

Site

Request

Forgery

(CSRF)

in

Simple-Log

allows

remote

attackers

to

gain

privilege

and

execute

arbitrary

code

via

the

component

\Simple-Log/admin/admin.php?act=act_edit_member\.


Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component \ /admin.php?action=page.\


Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component \ /admin.php?action=images.\


Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.

site request forgery
arbitrary command execution
cross site request forgery


Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery has been identified in Moxa IKS and EDS which may allow for the execution of unauthorized actions on the device.


Cross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.


Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.


Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.


Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.


Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack.


Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/.


Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users.


Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter related to CVE-2012-6290.


Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password.


Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors aka Bug ID CSCul25567.


Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.


Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3 8.7.x through 8.7 FP2 and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.


Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a 6.0.2/1a 5.5.7/12b 5.5.0/1b-p1 and possibly other versions allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter.


Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.


Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action.


Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2 9.5 before IFIX 2 10.1 before IFIX 2 and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.


Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals.


Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authentication of arbitrary users aka Bug ID CSCuh42164.


Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users aka Bug ID CSCue84676.


Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token.


Cross-site

request

forgery

(CSRF)

vulnerability

in

apps/calendar/ajax/settings/settimezone

in

ownCloud

before

allows

remote

attackers

to

hijack

the

authentication

of

users

for

requests

that

change

the

timezone

via

the

timezone

parameter.


Cross-site request forgery (CSRF) vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators.


Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12 8.0 before 8.0.0.8 and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.


Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.


Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/.


Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.


Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.


Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.


Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.


Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request.


Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.


Cross-site request forgery (CSRF) vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.


Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.


Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.


Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.


Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users.


Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors.


Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry via unspecified vectors.