Mayfly

2 exploits Active since Jun 2020

CVE-2022-35914 NOMISEC CRITICAL WORKING POC

GLPI htmLawed php command injection

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

2 stars

CVSS 9.8

View Code

CVE-2020-14295 NOMISEC HIGH WORKING POC

Cacti - SQL Injection

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries.

2 stars

CVSS 7.2

View Code