|
213211
|
6.5 |
MEDIUM
Network
|
chshcms
|
cscms
|
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.
|
CWE-352
Origin Validation Error
|
CVE-2019-9598
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213212
|
8.8 |
HIGH
Network
|
boltcms
|
bolt
|
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-9185
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213213
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9121
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213214
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9120
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213215
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9119
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213216
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9118
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213217
|
9.8 |
CRITICAL
Network
|
motorola
|
m2_firmware c1_firmware
|
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root …
|
CWE-78
OS Command
|
CVE-2019-9117
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213218
|
9.8 |
CRITICAL
Network
|
phpshe
|
phpshe
|
PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.
|
CWE-89
SQL Injection
|
CVE-2019-9626
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213219
|
8.8 |
HIGH
Network
|
directadmin
|
directadmin
|
JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.
|
CWE-352
Origin Validation Error
|
CVE-2019-9625
|
2024-11-21 13:51 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213220
|
7.8 |
HIGH
Local
|
webmin
|
webmin
|
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.
|
CWE-269
Improper Privilege Management
|
CVE-2019-9624
|
2024-11-21 13:51 |
2019-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|