251 matches found
CVE-2024-31666
脆弱性の概要 Flusity-CMS v.2.33 には脆弱性が存在し、リモート攻撃者が細工されたスクリプトを通じて editaddonpost.php コンポーネントで任意のコードを実行できる可能性があります。 影響を受けるバージョン Flusity-CMS v.2.33 脆弱性の詳細 攻撃者は editaddonpost.php コンポーネントに細工されたスクリプトを送信することでこの脆弱性を悪用し、標的サーバー上で任意のコードを実行する可能性があります。 影響 この脆弱性により、攻撃者がサーバー上で任意のコードを実行し、サーバー全体を制御できる可能性があります。 発見者：胡詩雅...
CVE-2024-31666
Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows a remote attacker to execute arbitrary code via a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details An attacker can exploit this vulnerability by sending a...
EUVD-2024-20619
Malicious code in bioql PyPI...
EUVD-2023-58093
Malicious code in bioql PyPI...
EUVD-2024-22748
Malicious code in bioql PyPI...
EUVD-2023-58095
Malicious code in bioql PyPI...
EUVD-2023-58076
Malicious code in bioql PyPI...
EUVD-2024-23754
Malicious code in bioql PyPI...
EUVD-2023-58094
Malicious code in bioql PyPI...
EUVD-2024-24862
Malicious code in bioql PyPI...
CVE-2024-32418
An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the addaddon.php component...
CVE-2024-31666
An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...
CVE-2024-27757
flusity CMS through 2.45 allows tools/addonsmodel.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."...
CVE-2024-25417
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...
CVE-2024-25502
Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...
CVE-2024-25418
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...
CVE-2024-25410
flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in updatesetting.php...
CVE-2024-23094
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /cover/addons/infomediagallery/action/editaddonpost.php...