CVE-2021-47979

WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion

WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX requests. Attackers can send POST requests to admin-ajax.php with crafted file_name and folder_name parameters to delete arbitrary files from the WordPress installation directory.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Miniorange Wordpress Wpbackitup

Products

Backup And Restore Wordpress Backup And Restore Wordpress

CVE-2021-47950

Advanced Guestbook 2.4.4 Persistent XSS via Smilies

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s_emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in the s_emotion field, which executes when administrators view the smilies tab.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Ampps Simplephpscripts

Products

Advanced Guestbook Guestbook Script

CVE-2021-47941

WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Modalsurvey Wordpress

Products

Survey & Poll Wordpress Survey And Poll Wordpress

CVE-2021-47932

WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthenticated

WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitting crafted requests to the AJAX handler. Attackers can send POST requests to the tcp_register_and_login_ajax action with tcp_role set to administrator to gain full administrative access without authentication.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Thecartpress Wordpress

Products

Thecartpress Wordpress

CVE-2021-47925

CMDBuild 3.3.2 Multiple Stored Cross-Site Scripting

CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject arbitrary web script or HTML via crafted input in card creation and file upload endpoints. Attackers can inject XSS payloads through Employee card parameters or SVG file attachments in the classes endpoint, which execute when other users view the affected records or preview attachments.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Cmdbuild Tecnoteca

Products

Cmdbuild Cmdbuild

CVE-2021-47903

LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path traversal and bash command injection.

CVSS 4.0 · 8.6 High EPSS 1.6% KEV · Not listed

Vendors

Litespeed Technologies Litespeedtech

Products

Litespeed Web Server Litespeed Web Server

CVE-2021-47889

Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path

Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Softros Systems\Softros Messenger\Spell Checker\' to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Cd-messenger Project Softros Systems

Products

Cd-messenger Lan Messenger

CVE-2021-47815

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Nsasoft Nsauditor

Products

Nsauditor Nsauditor

CVE-2021-47778

GetSimple CMS My SMTP Contact Plugin 1.1.2 - PHP Code Injection

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.

CVSS 4.0 · 8.6 High EPSS 1.3% KEV · Not listed

Vendors

Get-simple Netexplorer

Products

Getsimplecms My Smtp Contact

CVE-2021-47736

CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing

CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitrary command execution on the server.

CVSS 4.0 · 8.6 High EPSS 1.1% KEV · Not listed

Vendors

Cmsimple-xh

Products

Cmsimple Xh

CVE-2021-47708

COMMAX Smart Home IoT Control System SQL Injection Authentication Bypass

COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with malicious 'id' values to manipulate database queries and gain unauthorized access.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Bosch Commax

Products

Smart Home Smart Home System

CVE-2021-4474

Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive information including configuration files, credentials, and system data stored on the device.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ruckus Ruckussecurity Ruckuswireless

Products

Ruckus Unleashed Smartzone 100-d (sz100-d) (eol) Smartzone 100 (sz-100) (eol) and 6 more

CVE-2020-37255

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Wordpress Wptimecapsule

Products

Wordpress Wp Time Capsule

CVE-2020-37254

Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Wondershare

Products

Pdfelement

CVE-2020-37236

NewsLister Authenticated Persistent Cross-Site Scripting via Admin Panel

NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news addition interface. Attackers can inject JavaScript payloads via the title field in the admin panel that execute when news items are viewed by other users.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Netartmedia

Products

News Lister

CVE-2020-37226

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information using automated tools.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Joomsky

Products

J2 Jobs Js Jobs

CVE-2020-37224

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Joomsky

Products

J2 Jobs Js Jobs

CVE-2020-37216

Hirschmann HiOS EtherNet/IP Stack Denial of Service

Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Belden

Products

Hirschmann Hios

CVE-2020-37137

PHP-Fusion 9.03.50 - 'panels.php' Eval Injection

PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitrary code through an eval() function with unsanitized POST data. Attackers can exploit the vulnerability by sending crafted panel_content POST parameters to the panels.php administration endpoint to execute malicious code.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Php-fusion

Products

Php-fusion Phpfusion

CVE-2020-37136

ZOC Terminal v7.25.5 - 'Private key file' Denial of Service

ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create SSH key files.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Ejinshan Emtec

Products

Terminal Security System Zoc Terminal