CVE-2024-8411: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscarintegrada.php. Executing a manipulation of the argument SubExpresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly...

PT-2024-38992 · Abcd2 · Abcd2

Name of the Vulnerable Software and Affected Versions: ABCD ABCD2 versions up to 2.2.0-beta-1 Description: A problematic issue was found in the file /abcd/opac/php/otros sitios.php, where the manipulation of the sitio argument leads to path traversal. This issue can be initiated remotely. The...

CVE-2024-8409: Path Traversal: '../filedir'

A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/showimage.php. The manipulation of the argument image leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has...

PT-2024-38991

Name of the Vulnerable Software and Affected Versions: ABCD ABCD2 versions 2.2.0-beta-1 and earlier Description: A problematic issue has been found in ABCD ABCD2, affecting an unknown part of the file /common/show image.php. The manipulation of the image argument leads to path traversal, allowing...

ABCD2 安全漏洞

ABCD2 is an ABCD open source software suite for library and documentation center automation. A security vulnerability exists in ABCD2 2.2.0-beta-1 and earlier versions, which originates in an unknown section of the file /common/showimage.php, where manipulation of the parameter image results in...