CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

PT-2024-34505 · Hoosk · Hoosk

Name of the Vulnerable Software and Affected Versions: Hoosk version 1.7.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. Recommendations: For Hoosk version 1.7.1, consider disabling access to the config.php component...

CVE-2024-51055

CVE-2024-51055 concerns Hoosk (v1.7.1). A crafted script injected into the config.php component enables remote code execution by an attacker, per multiple sources (NVD/Red Hat/CNNVD/CIRCL/CVE list). Affected software: Hoosk 1.7.1; vulnerable component: config.php. Root cause: crafted script execu...

Hoosk 安全漏洞

Hoosk is a lightweight content management system by the individual developers of Havok. A security vulnerability exists in Hoosk v1.7.1, which stems from a well-designed script that can execute arbitrary code in the config.php component...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

CVE-2024-51055

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...

Hoosk CMS Arbitrary File Upload Vulnerability

Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...

CVE-2022-43234

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43234

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43234

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-26809 · Hoosk · Hoosk

Name of the Vulnerable Software and Affected Versions: Hoosk version 1.8 Description: An arbitrary file upload vulnerability in the "/attachments" component allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For Hoosk version 1.8, consider disabling the...

Hoosk CMS 代码问题漏洞

Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...

CVE-2022-43234

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43234

CVE-2022-43234 affects Hoosk v1.8, with an arbitrary file upload vulnerability in the "/attachments" component that allows remote code execution via a crafted PHP file. The root cause is insufficient validation of uploaded files, enabling an attacker to upload and execute arbitrary code. Multiple...

CVE-2022-28586

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars...

CVE-2022-28586

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars...

CVE-2022-28586

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars...

Cross site scripting

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars...

CVE-2022-28586

CVE-2022-28586 describes a stored/reflected? XSS in the edit page of Hoosk 1.8.0 that allows an attacker to run JavaScript in a user’s browser by submitting a crafted payload on the edit page (bypassing some special chars). The linked sources consistently identify Hoosk 1.8.0 as the affected prod...