27 matches found
CVE-2026-116255
A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...
CVE-2026-116255
A path traversal vulnerability exists in the URI Sanitizer component of PGYER codefever (affected up to commit 0c35e60f006f9d558cc33a159baf110659351990). The flaw is located in the _detail function of the application/controllers/doc.php file, where improper handling of the uri_string argument all...
EUVD-2026-109713
A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...
EUVD-2023-30609
Malicious code in bioql PyPI...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-26817
codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
Design/Logic Flaw
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
PT-2023-29089 · Unknown · Pgyer Codefever
Name of the Vulnerable Software and Affected Versions: PGYER codefever version 2023.8.14-2ce4006 Description: An issue in the code allows a remote attacker to execute arbitrary code via a crafted request to the branchList component. Recommendations: For version 2023.8.14-2ce4006, as a temporary...
CVE-2023-44080
CVE-2023-44080 concerns PGYER Codefever v.2023.8.14-2ce4006. A remote attacker can execute arbitrary code by sending a crafted request to the branchList component. The vulnerability is a remote code execution issue with critical impact (CVSS 3.1: High confidentiality, integrity, availability; net...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-44080: Improper Neutralization of Special Elements used in an OS Command
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CVE-2023-44080
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component...
CodeFever Security Vulnerabilities
CodeFever is a fully open source Git code hosting service from PGYER Open Source. A security vulnerability exists in CodeFever version v.2023.8.14-2ce4006 that originates from a vulnerability that allows remote attackers to execute arbitrary code via the branchList component using a crafted reque...
CVE-2023-26817
codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...