CVE-2023-49954.github.io

3CX CRM 통합의 SQL 인젝션 CRM 통합을 위해 3CX는 다양한 데이터베이스에 연결하기 위한 템플릿을 제공합니다. 이러한 템플릿에서는 플레이스홀더FirstName,SearchText,Email를 사용하여 쿼리를 채웁니다. 사용자 입력이 검증되지 않아 SQL 인젝션이 가능합니다. 영향을 받는 버전 답변 없음 2023-11-27 - CERT/CC가 설정한 마감일이 만료되었고 3CX로부터 응답이 없었다고 통보 2023-11-28 - MITRE에 CVE 요청 전송 2023-12-03 - CVE 할당됨 2023-12-14 - 공...

CVE-2026-69100

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

CVE-2026-69100

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

EUVD-2026-52741

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

CVE-2026-69100 LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

GaussDB Kernel: Prohibiting New Connections to Database Templates

To prevent improper modification of the database template, you need to set the datallowconn field in the system catalog pgdatabase to false, prohibiting new connections to the database. If the database template template1 is set to deny user connections, database upgrade will be affected. If...

GaussDB Kernel: Documenting Database Templates

All database templates must be documented. You need to carefully check any database templates without specific use. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Prohibiting New Connections to Database Templates

To prevent improper modification of the database template, you need to set the datallowconn field in the system catalog pgdatabase to false, prohibiting new connections to the database. If the database template template1 is set to deny user connections, database upgrade will be affected. If...

openGauss: Documenting Database Templates

All database templates must be documented. You need to carefully check any database templates without specific use. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...