Text Exploits
31,329 exploits tracked across all sources.
Fiyo CMS 2.0.6.1 - Privilege Escalation
Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
by rungga_reksya
CVSS 8.8
Dnatools Dnalims - Insufficiently Protected Credentials
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/spool/.pfile file).
by Shorebreak Security
CVSS 8.1
Dnatools Dnalims - Path Traversal
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter).
by Shorebreak Security
CVSS 7.5
Dnatools Dnalims - Authentication Bypass
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests).
by Shorebreak Security
CVSS 9.8
Kinsey Infor-lawson - SQL Injection
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData.
by Michael Benich
CVSS 9.8
Dnatools Dnalims - Insufficient Session Expiration
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter.
by Shorebreak Security
CVSS 8.8
WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection
by Ihsan Sencan
WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download
by Ihsan Sencan
WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection
by Ihsan Sencan
WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download
by Ihsan Sencan
By Source