CVE Vulnerabilities Archive - Page 16469 of 18763

CVE-2022-32413

February 23, 2023 by godfreyd94

An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.

CVE-2022-32412

February 23, 2023 by godfreyd94

An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.

CVE-2022-32411

February 23, 2023 by godfreyd94

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.

The Build App Online WordPress plugin before 1.0.19 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

CVE-2022-32409

February 23, 2023 by godfreyd94

A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.

CVE-2022-32407

February 23, 2023 by godfreyd94

Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.