91 matches found
Code injection
baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...
CVE-2023-25655 baserCMS allows any file to be uploaded
baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...
CVE-2023-25655 baserCMS allows any file to be uploaded
baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...
CVE-2023-25654 baserCMS File Uploader Remote Code Execution (RCE) vulnerability
baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution RCE Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch...
baserCMS 代码问题漏洞
baserCMS is an enterprise-level content management system CMS from the baserCMS team. A code issue vulnerability exists in versions of baserCMS prior to 4.7.5, which stems from a Remote Code Execution RCE vulnerability in the management system of baserCMS...
Sql injection
A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...
CVE-2022-4566
CVE-2022-4566 affects y_project RuoYi 4.7.5, with a vulnerability in the GenController (com/ruoyi/generator/controller/GenController) that enables SQL injection due to how inputs are handled. The patch referenced is 167970e5c4da7bb46217f576dc50622b83f32b40; applying this patch is recommended to f...
PT-2022-27602 · Unknown · Y Project Ruoyi
Name of the Vulnerable Software and Affected Versions: y project RuoYi version 4.7.5 Description: A critical issue has been found in the processing of the file com/ruoyi/generator/controller/GenController, leading to sql injection. Recommendations: For y project RuoYi version 4.7.5, it is...
CVE-2022-4566 y_project RuoYi GenController sql injection
A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...
RuoYi SQL注入漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.7.5, which is caused by an incorrect operation resulting in sql injection...
Rocket.Chat 安全漏洞
Rocket.Chat is an open source team chat software. An information disclosure vulnerability exists in Rocket.Chat versions prior to 4.7.5, 4.8.0 and later, and prior to 4.8.2, which stems from a failure of the getReadReceipts Meteor server method to correctly filter user input passed to a MongoDB...
Cloud Foundry UAA open redirect
Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior to v60 except v55.1 and v52.9, does not validate redirect URL values on a form parameter used for internal UAA redirects on the login page, allowing open...
SUSE: Security Advisory (SUSE-SU-2018:0909-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Red Hat OpenShift Input Validation Error Vulnerability
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. An input validation error vulnerability exists in multiple Red Hat products. The vulnerability stems from a networked system or produc...
CVE-2020-8506
The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics...
CVE-2019-11512
Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5...
Sql injection
Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5...
CVE-2019-11512
Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5...
