Mayfly

3 exploits Active since Jun 2020
CVE-2022-35914 NOMISEC CRITICAL WORKING POC
GLPI htmLawed php command injection
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
2 stars
CVSS 9.8
CVE-2020-14295 NOMISEC HIGH WORKING POC
Cacti 1.2.12 - Authenticated SQL Injection via color.php filter Parameter
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.
2 stars
CVSS 7.2
CVE-2022-35914 WRITEUP CRITICAL WORKING POC
GLPI htmLawed php command injection
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
CVSS 9.8