|
211601
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9120
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211602
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9119
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211603
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9118
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211604
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9117
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211605
|
9.8 |
CRITICAL
Network
|
phpshe
|
phpshe
|
PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.
|
CWE-89
SQL Injection
|
CVE-2019-9626
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211606
|
8.8 |
HIGH
Network
|
directadmin
|
directadmin
|
JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.
|
CWE-352
Origin Validation Error
|
CVE-2019-9625
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211607
|
7.8 |
HIGH
Local
|
webmin
|
webmin
|
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.
|
CWE-269
Improper Privilege Management
|
CVE-2019-9624
|
2024-11-21 13:51 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211608
|
9.8 |
CRITICAL
Network
|
fengoffice
|
feng_office
|
Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-9623
|
2024-11-21 13:51 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211609
|
4.3 |
MEDIUM
Network
|
ebrigade
|
ebrigade
|
eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file.
|
CWE-22
Path Traversal
|
CVE-2019-9622
|
2024-11-21 13:51 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211610
|
8.8 |
HIGH
Network
|
ofcms_project
|
ofcms
|
An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/uedito…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-9617
|
2024-11-21 13:51 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|