7 matches found
php_filter_chains_oracle_exploit_for_CVE-2023-6199
PHP filter chains: Datei-Lesen aus fehlerbasiertem Oracle. Aktualisiertes Skript zur Ausnutzung von CVE-2023-6199 Ein CLI, um Parameter auszunutzen, die vom Datei-Lesen betroffen sind, das durch das fehlerbasierte Oracle von PHP filter chains verursacht wird. Es kann verwendet werden, um den Inha...
CVE-2023-6199
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
Server side request forgery (ssrf)
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199 Book Stack v23.10.2 - LFR via Blind SSRF
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199 Book Stack v23.10.2 - LFR via Blind SSRF
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
EUVD-2023-58447
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199
The CVE-2023-6199 entry concerns Book Stack (BookStack) v23.10.2 with a Server-Side Request Forgery flaw that enables Local File Read via SSRF. The connected exploits/documentation show an attack chain using php://filter to read server files (e.g., /etc/passwd) by abusing the SSRF entry point ( o...