Show filters
154 Total Results
Displaying 81-90 of 154
Sort by:
Attacker Value
Unknown
CVE-2020-22122
Disclosure Date: August 18, 2021 (last updated February 23, 2025)
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request.
0
Attacker Value
Unknown
CVE-2021-23415
Disclosure Date: July 28, 2021 (last updated February 23, 2025)
This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path.
0
Attacker Value
Unknown
CVE-2021-23407
Disclosure Date: July 14, 2021 (last updated February 23, 2025)
This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file system path.
0
Attacker Value
Unknown
CVE-2021-23394
Disclosure Date: June 13, 2021 (last updated February 22, 2025)
The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
0
Attacker Value
Unknown
CVE-2021-24238
Disclosure Date: April 22, 2021 (last updated February 22, 2025)
The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the property_id parameter.
0
Attacker Value
Unknown
CVE-2021-24237
Disclosure Date: April 22, 2021 (last updated February 22, 2025)
The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not properly sanitise the keyword_search, search_radius. _bedrooms and _bathrooms GET parameters before outputting them in its properties page, leading to an unauthenticated reflected Cross-Site Scripting issue.
0
Attacker Value
Unknown
CVE-2020-24550
Disclosure Date: March 31, 2021 (last updated February 22, 2025)
An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirect parameter in a crafted URL, such as a /find_v2/_click URL.
0
Attacker Value
Unknown
CVE-2018-25002
Disclosure Date: January 01, 2021 (last updated February 22, 2025)
uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy.
0
Attacker Value
Unknown
CVE-2020-11832
Disclosure Date: December 31, 2020 (last updated February 22, 2025)
In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c have not checked the parameters, which causes a vulnerability.
0
Attacker Value
Unknown
CVE-2020-11833
Disclosure Date: December 31, 2020 (last updated February 22, 2025)
In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write does not check the parameter len which causes a vulnerability.
0
