CVE-2025-23938

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoadmwr42f 2025-01-22 17:13:43+00:00| seen| https://t.me/cvedetector/16104...

CVE-2025-23938

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CRUDLab Image Gallery Box by CRUDLab image-gallery-box-by-crudlab allows PHP Local File Inclusion.This issue affects Image Gallery Box by CRUDLab: from n/a through = 1.0.3...

CVE-2025-23938 WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CRUDLab Image Gallery Box by CRUDLab image-gallery-box-by-crudlab allows PHP Local File Inclusion.This issue affects Image Gallery Box by CRUDLab: from n/a through = 1.0.3...

CVE-2025-23938

CVE-2025-23938 affects Image Gallery Box by CRUDLab (WordPress plugin). Red Hat and WordPress vulnerability data describe an Authenticated Local File Inclusion (LFI) caused by improper handling of filename includes in PHP, enabling access to local files via NotFound Image Gallery Box pages. Affec...

CVE-2024-23938

creationtimestamp| type| source ---|---|--- 2024-09-28 08:37:50+00:00| seen| https://t.me/cvedetector/6595...

CVE-2023-23938

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:48+00:00| seen| https://t.me/cibsecurity/62535...

CVE-2023-23938 Cross-site Scripting (XSS) through the name of a color of select box values in tuleap

Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting attack which can be injected in the name of a color of select box values of a tracker and then reflected in the tracker administration...

CVE-2023-23938

CVE-2023-23938 describes a cross-site scripting (XSS) vulnerability in Tuleap. Affected: Tuleap Community Edition and related builds prior to version 14.5.99.4. The issue arises when the name of a color used for values in a tracker’s select box is reflected in the tracker administration page, ena...

CVE-2020-23938

CVE-2020-23938 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-23938

...

CVE-2021-23938

CVE-2021-23938 is rejected/not used; the candidate was in a CNA pool and not assigned to issues.