6 matches found
CVE-2023-27821
Databasir v1.0.7 was discovered to contain a remote code execution RCE vulnerability via the mockDataScript parameter...
CVE-2022-24862
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address wi...
CVE-2023-27821
Databasir v1.0.7 was discovered to contain a remote code execution RCE vulnerability via the mockDataScript parameter...
Databasir 安全漏洞
Databasir is a relational database model document management platform for teams. A security vulnerability exists in Databasir version 1.0.7, which stems from the discovery of a remote code execution RCE vulnerability via the mockDataScript parameter...
PT-2022-20605 · Databasir · Databasir
Name of the Vulnerable Software and Affected Versions: Databasir versions 1.06 and earlier Description: The issue allows attackers to perform Server-Side Request Forgery SSRF by sending a single HTTP POST request to create a databaseType. This is achieved by supplying a jdbcDriverFileUrl that...
Databasir 代码问题漏洞
Databasir is a team-oriented document management platform for relational database models. A code issue vulnerability exists in Databasir versions prior to 1.0.7 that stems from a server-side request forgery SSRF vulnerability by providing a jdbcDriverFileUrl that returns a non-200 response code,...