CVE-2022-45852

CVE-2022-45852 is a path traversal vulnerability in the WordPress WP-FormAssembly plugin affecting versions n/a through 2.0.5. It arises from improper limitation of a pathname to a restricted directory, allowing traversal to sensitive files. Documented impacts include (per sources) potential unau...

CVE-2022-45852 WordPress WP-FormAssembly plugin <= 2.0.5 - Auth. Arbitrary File Read vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in FormAssembly / Drew Buschhorn WP-FormAssembly allows Path Traversal.This issue affects WP-FormAssembly: from n/a through 2.0.5...

CVE-2023-45852

creationtimestamp| type| source ---|---|--- 2023-10-14 07:29:31+00:00| seen| https://t.me/cibsecurity/72279 2023-10-31 19:52:09+00:00| published-proof-of-concept| Telegram/-CUWKwBEcwVjAmflphUE2rR4naQmsMl4HRbXghsNm8kRw 2023-12-07 10:47:27+00:00| published-proof-of-concept|...

CVE-2023-45852

The CVE describes a remote code execution in Viessmann Vitogate 300 (version 2.1.3.0 and earlier) through /cgi-bin/vitogate.cgi. An unauthenticated attacker can bypass authentication and execute arbitrary commands by injecting shell metacharacters in the ipaddr field of the JSON data in a PUT req...

CVE-2021-45852

creationtimestamp| type| source ---|---|--- 2022-03-16 13:20:24+00:00| seen| https://t.me/cibsecurity/39019...

CVE-2021-45852

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

CVE-2021-45852

Projectworlds Hospital Management System v1.0 contains a privilege error allowing an unauthorized attacker to add patients without restriction via add_patient.php (and related add_ppatient.php in some references). The core issue is improper authorization for patient creation, enabling unlimited e...