CVE-2022-24734 Remote code execution in mybb

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type php with PHP code, executed on on Change Settings pages. This resul...

CVE-2022-24734

Summary (CVE-2022-24734) : MyBB Admin Control Panel Settings module fails to validate setting types on insert/update, allowing a crafted PHP setting to be executed on Change Settings pages. This enables Remote Code Execution (RCE) if the attacker can access Admin CP with the Can manage settings? ...

Github spirit input validation error vulnerability

Github spirit is a Python-based forum built using the Django framework. github spirit is vulnerable to an input validation error, which stems from sending a request that results in an insecure redirect. No detailed vulnerability details are available at this time...

WordPress Asgaros Forum Plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Asgaros Forum Plugin versions prior to 2.0.0, which stems fr...

CVE-2022-0411

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

CVE-2022-0411

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

CVE-2022-0411 Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

CVE-2022-0411

The CVE-2022-0411 issue affects the WordPress Asgaros Forum plugin prior to 2.0.0. The vulnerability stems from improper sanitization/escaping of the post_id parameter used within a SQL statement exposed via a REST route that is accessible to any authenticated user, enabling SQL injection. Affect...

CVE-2022-0411 Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

CVE-2022-0411: Improper Neutralization of Special Elements used in an SQL Command

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the postid parameter before using it in a SQL statement via a REST route of the plugin accessible to any authenticated user, leading to a SQL injection...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Asgaros Forum Plugin versions prior to 2.0.0, which stems fr...

Pybbs Cross-Site Scripting Vulnerability

Pybbs is a community forum for more practical Java development. A cross-site scripting vulnerability exists in Pybbs, which stems from the product's search box not effectively handling special characters in user input data. An attacker can exploit this vulnerability to execute client-side code...

CVE-2022-23390

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

CVE-2022-23390

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

Design/Logic Flaw

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

CVE-2022-23390

CVE-2022-23390 affects BBS Forum, where the vulnerability is in the getType function. Reports indicate that versions 5.3 and earlier are susceptible to arbitrary file uploads due to improper checks in the file handling logic. Affected product: BBS Forum (v5.3 and earlier). Impact: potential arbit...

CVE-2022-23390

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

CVE-2022-23390

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

CVE-2022-23390: Unrestricted Upload of File with Dangerous Type

An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...

Bbs Forum 代码问题漏洞

Bbs Forum Patrol Cloud Light Forum System is a forum system. A code issue vulnerability exists in BBS Forum, which originates from the product's getType function not performing security checks on uploaded files. An attacker can use this vulnerability to upload arbitrary files. The following...