CVE-2020-23790

CVE-2020-23790 affects the Golo Laravel theme v1.1.5. The vulnerability is described as an Arbitrary File Upload, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base score 7.5 (HIGH). Exploitation details are not provided in the connected documents; references indicate public listings but d...

CVE-2020-23790

An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5...

Golo Laravel theme 代码问题漏洞

Golo Laravel theme is a Golo open source application . It is used to create a local or global catalog site. Golo Laravel theme version 1.1.5 has a code issue vulnerability...

Golo < 1.3.3 - Unauthenticated Reflected XSS

An Unauthenticated Reflected XSS vulnerability was discovered in the Golo theme v1.3.2 for WordPress. PoC https://example.com/?s=%22%3E%3Cimg+src%3Dx+onerror%3DalertXSS%2F%2F%22%3Etype=place...

Golo < 1.3.3 - Unauthenticated Reflected XSS

An Unauthenticated Reflected XSS vulnerability was discovered in the Golo theme v1.3.2 for WordPress. https://example.com/?s=%22%3E%3Cimg+src%3Dx+onerror%3DalertXSS%2F%2F%22%3E&posttype=place...

WordPress Golo premium theme <= 1.3.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Vlad Vector in WordPress Golo premium theme versions = 1.3.2. Solution Update the WordPress Golo premium theme to the latest available version at least 1.3.3...

Shenzhen Yuanzheng Technology golo merchant Android APP has arbitrary account password reset vulnerability

golo merchant is an app developed by Shenzhen Yuanzheng Technology to provide auto repair services. There is an arbitrary account password reset vulnerability in the golo merchant android app of Shenzhen Yuanzheng Technology. An attacker can reset any registered user's password by means of CAPTCH...

Shenzhen Yuanzheng Technology golo android app has information leakage vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. Shenzhen Yuanzheng Technology golo Android APP has information leakage vulnerability. The attacker can view the user's sensitive informatio...

Shenzhen Yuanzheng Technology golo Android APP has arbitrary account login vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. A vulnerability exists in Shenzhen Yuanzheng Technology's golo Android APP that allows an attacker to log in to any account. An attacker ca...

Shenzhen Yuanzheng Technology golo Android APP has overstepped access vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. Shenzhen Yuanzheng Technology's golo Android APP has an overstepping access vulnerability, which allows an attacker to view any registered...