CVSS: 8.3EPSS: 39%CPEs: 1EXPL: 2CVE-2023-24249
https://notcve.org/view.php?id=CVE-2023-24249
27 Feb 2023 — An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file. • https://github.com/IDUZZEL/CVE-2023-24249-Exploit • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38089
https://notcve.org/view.php?id=CVE-2022-38089
24 Aug 2022 — Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script. Vulnerabilidad de tipo cross-site scripting almacenado en Exment ((PHP8) exceedone/exment v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment v4.4.2 y anteriores y exce... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38080
https://notcve.org/view.php?id=CVE-2022-38080
24 Aug 2022 — Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script. Una vulnerabilidad de tipo cross-site scripting reflejado en Exment ((PHP8) exceedone/exment v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment v4.4.2 y anteriores ... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 1%CPEs: 2EXPL: 0CVE-2022-37333
https://notcve.org/view.php?id=CVE-2022-37333
24 Aug 2022 — SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands. Una vulnerabilidad de inyección SQL en Exment ((PHP8) exceedone/exment versiones v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment versiones v4.4.2 y anteriores y exceedone/... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •