yashar shahinzadeh vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote malicious users to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.

Ritecms Ritecms 1.0.0

1 EDB exploit

Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php.

Ritecms Ritecms 1.0.0

1 EDB exploit

SQL injection vulnerability in view.php in Machform 2 allows remote malicious users to execute arbitrary SQL commands via the element_2 parameter.

Machform Machform 2.0

1 EDB exploit

Unrestricted file upload vulnerability in view.php in Machform 2 allows remote malicious users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in the upload form's directory in data/.

Machform Machform 2.0

1 EDB exploit

Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote malicious users to inject arbitrary web script or HTML via the element_2 parameter.

Machform Machform 2.0

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote malicious users to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.

Zimplit Zimplit Cms

3 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook