CVE-2020-24063

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...

CVE-2020-24063

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...

CVE-2020-24063

The CVE-2020-24063 entry concerns the WordPress Canto plugin (version 1.3.0) with a server-side request forgery (SSRF) flaw in includes/lib/download.php?subdomain=. The vulnerability allows an attacker to access internal resources, as described in various sources. The NVD/CVSS data indicates a hi...

PT-2020-15635

Name of the Vulnerable Software and Affected Versions Canto plugin version 1.3.0 for WordPress Description The issue allows for Server-Side Request Forgery SSRF via the "includes/lib/download.php" endpoint with the subdomain parameter. Recommendations For Canto plugin version 1.3.0, consider...

CVE-2020-24063: Server-Side Request Forgery (SSRF)

The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF...

SQL Injection Vulnerability in MagazineCantoRequest.aspx of Beijing Jinpan Software Technology Co.

Beijing Jinpan Software Technology Co., Ltd. Jinpan collection query system is a digital library as the framework for building a new type of large-scale system adapted to the operation mechanism of digital libraries. The product MagazineCantoRequest.aspx SQL injection vulnerability exists, the...

Code injection

cantocurses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed...

CVE-2013-7416

cantocurses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed...

CVE-2013-7416

cantocurses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed...

CVE-2013-7416

CVE-2013-7416 affects canto_curses/guibase.py in Canto Curses prior to 0.9.0. The issue allows a remote feed server to execute arbitrary commands via shell metacharacters in a URL contained in a feed. CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authenticati...

CVE-2013-7416

cantocurses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed...

PT-2014-3425

Name of the Vulnerable Software and Affected Versions Canto Curses versions prior to 0.9.0 Description The issue allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed. This is due to a problem in the canto curses/guibase.py file. Recommendations For...

CVE-2013-7416: Improper Neutralization of Special Elements used in a Command

cantocurses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed...