Skip to content
OpenAdvisories

Vendor

Sourceforge

15 known vulnerabilities.

Products

202CMS 2 Easyndexer 2 Data Center Audit 2 Snes9K 0.0.9z 1 phpFileManager 1 SoX - Sound eXchange 1 OpenBiz Cubi Lite 1 Placeto CMS 1 GPS Tracking System 1 Meneame English Pligg 1 SimplePress CMS 1 Echo Mirage 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.2
    CVE-2019-25632

    phpFileManager 1.7.8 Local File Inclusion via index.php

    phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filename parameters. Attackers can send GET requests to index.php with crafted par…

    Sourceforge phpFileManager
  • Medium 5.3
    CVE-2018-25190

    Easyndexer 1.0 Cross-Site Request Forgery via createuser.php

    Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests. Attackers can craft malicious web pages that submit POST requests to createuser.php …

    Sourceforge Easyndexer
  • Medium 5.3
    CVE-2018-25177

    Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php

    Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POST requests. Attackers can send requests to dca_resetpw.php with parameters updat…

    Sourceforge Data Center Audit