| Max CVSS | 9.3 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-18322 | 7.5 |
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
|
24-01-2023 - 18:57 | 15-10-2018 - 07:29 | |
| CVE-2018-18324 | 4.3 |
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_fullstatus, service_restart, service_stop, or file (within the file_editor
|
24-01-2023 - 18:57 | 15-10-2018 - 07:29 | |
| CVE-2018-18323 | 5.0 |
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
|
24-01-2023 - 18:57 | 15-10-2018 - 07:29 | |
| CVE-2018-4139 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)
|
07-03-2019 - 15:27 | 03-04-2018 - 06:29 | |
| CVE-2018-17980 | 6.8 |
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current worki
|
22-01-2019 - 21:48 | 15-10-2018 - 19:29 | |
| CVE-2007-5773 | 4.3 |
Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in t
|
29-09-2017 - 01:29 | 01-11-2007 - 16:46 | |
| CVE-2007-5774 | 5.0 |
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message.
|
29-09-2017 - 01:29 | 01-11-2007 - 16:46 | |
| CVE-2013-1468 | 7.6 |
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.
|
03-10-2013 - 18:49 | 14-03-2013 - 03:13 | |
| CVE-2013-1469 | 4.0 |
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.
|
19-03-2013 - 04:00 | 13-03-2013 - 20:55 |