Day: July 30, 2021

IBM WebSphere Application Server 7.0/8.0/8.5/9.0 Privilege Escalation

A vulnerability was found in IBM WebSphere Application Server 7.0/8.0/8.5/9.0 (Application Server Software) and classified as problematic. Upgrading eliminates this

Common Vulnerabilities and Exposures

S-CMS PHP 3.0 PHP File /1.com.php Privilege Escalation

A vulnerability was found in S-CMS PHP 3.0 (Content Management System). It has been classified as critical. Affected is an

Common Vulnerabilities and Exposures

SourceCodester Learning Management System 1.0 lmsstudent_avatar.php unrestricted upload

A vulnerability was found in SourceCodester Learning Management System 1.0 (Learning Management Software). It has been declared as critical. Affected

Common Vulnerabilities and Exposures

IBM Partner Engagement Manager 2.0 deserialization [CVE-2021-29781]

A vulnerability was found in IBM Partner Engagement Manager 2.0. It has been rated as critical. Affected by this issue

Common Vulnerabilities and Exposures

vscode-phpmd up to 1.2.x on Visual Studio Workspace Folder phpmd.command Privilege Escalation

A vulnerability classified as critical has been found in vscode-phpmd up to 1.2.x on Visual Studio. This affects an unknown

Common Vulnerabilities and Exposures

concrete5 up to 8.5.5 logging.php Logging::update_logging logFile deserialization

A vulnerability classified as critical was found in concrete5 up to 8.5.5. This vulnerability affects the function Logging::update_logging of the

Common Vulnerabilities and Exposures

Advisto Peel SHOPPING up to 9.4.0.0 produit_details.php id sql injection

A vulnerability, which was classified as critical, has been found in Advisto Peel SHOPPING up to 9.4.0.0. This issue affects

Common Vulnerabilities and Exposures

whatsns 4.0 Parameter ip sql injection

A vulnerability, which was classified as critical, was found in whatsns 4.0. Affected is an unknown function of the file

Common Vulnerabilities and Exposures

MetInfo 6.1.3 basic.php dosafety_emailadd sql injection

A vulnerability has been found in MetInfo 6.1.3 (Content Management System) and classified as critical. Affected by this vulnerability is

Common Vulnerabilities and Exposures

ECTouch 2 Shop Page index.php sql injection

A vulnerability was found in ECTouch 2 and classified as critical. Affected by this issue is some unknown functionality of

Common Vulnerabilities and Exposures

Ruby up to 3.0 on Windows Path TmpDir Privilege Escalation

A vulnerability was found in Ruby up to 3.0 on Windows (Programming Language Software). It has been classified as critical.

Common Vulnerabilities and Exposures

NukeViet CMS up to 4.3.07 addtotopics.php topicsid sql injection

A vulnerability was found in NukeViet CMS up to 4.3.07 (Content Management System). It has been declared as critical. This

Common Vulnerabilities and Exposures

NukeViet CMS 4.0.29/4.3 detail.php listid sql injection

A vulnerability was found in NukeViet CMS 4.0.29/4.3 (Content Management System). It has been rated as critical. This issue affects

Common Vulnerabilities and Exposures

TCExam up to 14.8.1 tce_filemanager.php cross site scripting

A vulnerability classified as problematic has been found in TCExam up to 14.8.1. Affected is some unknown processing of the

Common Vulnerabilities and Exposures

TCExam up to 14.8.1 tce_select_mediafile.php cross site scripting

A vulnerability classified as problematic was found in TCExam up to 14.8.1. Affected by this vulnerability is an unknown function

Common Vulnerabilities and Exposures

Online Pet Shop We App 1.0 products.php c/s sql injection

A vulnerability, which was classified as critical, has been found in Online Pet Shop We App 1.0. Affected by this

Common Vulnerabilities and Exposures

CSZ CMS 1.2.9 Parameter unlink denial of service

A vulnerability, which was classified as problematic, was found in CSZ CMS 1.2.9 (Content Management System). This affects the function

Common Vulnerabilities and Exposures

MetInfo 6.1.3 admin/index.php doaddsave cross-site request forgery

A vulnerability has been found in MetInfo 6.1.3 (Content Management System) and classified as problematic. This vulnerability affects the function

Common Vulnerabilities and Exposures

HuCart 5.7.4 index.php nickname cross site scripting

A vulnerability was found in HuCart 5.7.4 and classified as problematic. This issue affects an unknown code of the file

Common Vulnerabilities and Exposures

FlatPress 1.1 flat/admin.php DeleteFile cross-site request forgery

A vulnerability was found in FlatPress 1.1. It has been classified as problematic. Affected is the function DeleteFile of the

Common Vulnerabilities and Exposures

LearnPress Plugin up to 3.2.6.8 on WordPress Parameter accept-to-be-teacher action Privilege Escalation

A vulnerability was found in LearnPress Plugin up to 3.2.6.8 on WordPress (WordPress Plugin). It has been declared as critical.

Common Vulnerabilities and Exposures

S-CMS PHP 3.0 Basic Settings Copyright cross site scripting

A vulnerability was found in S-CMS PHP 3.0 (Content Management System). It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures

S-CMS PHP 3.0 /app/form_add/of Title Entry cross site scripting

A vulnerability classified as problematic has been found in S-CMS PHP 3.0 (Content Management System). This affects an unknown functionality

Common Vulnerabilities and Exposures

S-CMS PHP 3.0 /app/config/of cross site scripting

A vulnerability classified as problematic was found in S-CMS PHP 3.0 (Content Management System). This vulnerability affects some unknown functionality