PHP - CVE CyberSecurity Database News (Page 206)

Nov 10, 2022 PHP

CVE-2022-43074 AyaCMS v3.1.2 had an arbitrary file upload vulnerability via the /admin/fst_upload.inc.php component.

An attacker can upload a PHP file via the component /admin/fst_upload.inc.php and then upload a file with a malicious code or

Nov 10, 2022 RCE Exploit Apache PHP Ecisp Espcms

CVE-2022-44087 - How a File Upload Vulnerability in ESPCMS P8.21120101 Allows Remote Code Execution (RCE)

--- Introduction In late 2022, a serious vulnerability (CVE-2022-44087) was discovered in ESPCMS P8.21120101, a popular content management system widely used for building web

Nov 10, 2022 RCE PHP

CVE-2022-39036 - RCE via Unfiltered File Upload in Agentflow BPM – A Simple Breakdown

Agentflow BPM is a workflow and business process management platform used in many organizations to automate their business processes. While it offers useful features, a

Nov 10, 2022 RCE Exploit PHP Ecisp Espcms

CVE-2022-44089 - Remote Code Execution in ESPCMS P8.21120101 via IS_GETCACHE — Deep Dive and Exploit Example

Date Posted: June 2024 Author: Security Explainer What Is CVE-2022-44089? CVE-2022-44089 is a critical Remote Code Execution (RCE) vulnerability found in ESPCMS version P8.21120101.

Nov 10, 2022 API Exploit PHP SUSE SUSE Manager Server 4.2

CVE-2022-31255 - Path Traversal in SUSE Uyuni and Spacewalk — Details, Exploit, and Fixes

CVE-2022-31255 is a path traversal vulnerability found in several SUSE Uyuni and Spacewalk packages, affecting specific versions within SUSE Linux Enterprise Module for SUSE Manager