CVE-2024-1116

A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed t...

Design/Logic Flaw

A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-1116

The CVE-2024-1116 case affects openBI versions up to 1.0.8. The vulnerability is in the index function of /application/plugins/controller/Upload.php , enabling an unrestricted file upload and enabling remote exploitation. Multiple sources confirm the issue and public disclosure of the exploit. Th...

CVE-2024-1115

CVE-2024-1115 affects openBI up to version 1.0.8. The vulnerability is in the function dlfile of /application/websocket/controller/Setting.php; manipulating the argument phpPath can lead to an OS command injection. The issue appears to be remotely exploitable and, per the source documents, the ex...

CVE-2024-1113

CVE-2024-1113 affects openBI up to v1.0.8, targeting the uploadUnity function in /application/index/controller/Unity.php. The root cause is manipulation of the file argument, enabling unrestricted remote file uploads. Multiple sources confirm the vulnerability and its public disclosure. A practic...

openBI 访问控制错误漏洞

openBI is a big data visualization solution from openBI, Inc. An access control error vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the dlfile function in the /application/index/controller/Screen.php file that could lead to incorrect access control...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem in the index function of the /application/plugins/controller/Upload.php file, which could lead to unrestricted file uploads...

PT-2024-16784 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found, affecting the dlfile function of the file /application/index/controller/Screen.php. The manipulation of the fileUrl argument leads to improper access controls. The atta...

PT-2024-16793 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found, affecting the function index of the file /application/plugins/controller/Upload.php. This leads to unrestricted upload and can be exploited remotely. The issue has been...

openBI 代码问题漏洞

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the uploadUnity function of the /application/index/controller/Unity.php file, which could lead to unrestricted file uploads...

PT-2024-19246 · WordPress · Wolf – Wordpress Posts Bulk Editor/Manager

Name of the Vulnerable Software and Affected Versions: WOLF – WordPress Posts Bulk Editor and Manager Professional versions 1.0.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected...

CVE-2024-1036

CVE-2024-1036 (openBI) : A vulnerability in openBI up to 1.0.8 affects the function uploadIcon in /application/index/controller/Screen.php (Icon Handler), enabling unrestricted uploads. Documents consistently describe a remote attack that can be exploited publicly; CVSS/impact notes vary, but all...

CVE-2024-1035

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

Out-of-bounds

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

openBI Security Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A security vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadFile method of the /application/index/controller/File.php file...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI Inc. A code issue vulnerability exists in openBI version 1.0.8, which stems from an unrestricted file upload in the uploadIcon method of the /application/index/controller/Icon.php file...

PT-2024-16208 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical vulnerability has been found in openBI, affecting the uploadIcon function of the file /application/index/controller/Icon.php. The manipulation of the image argument leads to unrestricted...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI version 1.0.8 and prior versions. An attacker exploited the vulnerability to cause deserialization...

PT-2024-16199 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical vulnerability was found in openBI, affecting the uploadFile function of the file /application/index/controller/File.php. This leads to unrestricted upload and can be initiated remotely. The...

openBI Information Disclosure Vulnerability

openBI is a big data visualization solution from openBI. An information disclosure vulnerability exists in openBI version 1.0.8, which stems from an information disclosure issue in the agent method of the /application/index/controller/Datament.php file...