CVE-2023-24776

Funadmin v3.2.0 was discovered to contain a remote code execution RCE vulnerability via the component \controller\Addon.php...

CVE-2024-32418

A remote code execution (RCE) vulnerability exists in flusity CMS v2.33 . The flaw is located within the add_addon.php component, allowing an unauthenticated remote attacker to execute arbitrary code. The impact is considered critical, with potential for high confidentiality, integrity, and avail...

PT-2024-24555 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS version 2.33 Description: An issue in the software allows a remote attacker to execute arbitrary code via the add addon.php component. Recommendations: For version 2.33, consider disabling the add addon.php component until a patch...

CVE-2006-3751: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...