117 matches found
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
Hoosk 安全漏洞
Hoosk is a lightweight content management system by the individual developers of Havok. A security vulnerability exists in Hoosk v1.7.1, which stems from a well-designed script that can execute arbitrary code in the config.php component...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51055
Hoosk version 1.7.1 is vulnerable to remote code execution (RCE) due to an issue where a crafted script can be targeted at the config.php component. This vulnerability allows a remote attacker to execute arbitrary code. To mitigate the risk, it is recommended to disable access to the config.php c...
CVE-2024-51055
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
CVE-2024-51055: Improper Neutralization of Input During Web Page Generation
An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component...
PT-2024-34505 · Hoosk · Hoosk
Name of the Vulnerable Software and Affected Versions: Hoosk version 1.7.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. Recommendations: For Hoosk version 1.7.1, consider disabling access to the config.php component...
Hoosk CMS Arbitrary File Upload Vulnerability
Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...
CVE-2022-43234
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43234
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
Hoosk CMS 代码问题漏洞
Hoosk CMS is a lightweight content management system. Hoosk CMS v1.8.0 suffers from an arbitrary file upload vulnerability that stems from its /attachments component failing to validate uploaded files. An attacker can exploit the vulnerability to remotely execute code...
CVE-2022-43234
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43234
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
PT-2022-26809 · Hoosk · Hoosk
Name of the Vulnerable Software and Affected Versions: Hoosk version 1.8 Description: An arbitrary file upload vulnerability in the "/attachments" component allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For Hoosk version 1.8, consider disabling the...
CVE-2022-43234: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43234
CVE-2022-43234 affects Hoosk v1.8, with an arbitrary file upload vulnerability in the "/attachments" component that allows remote code execution via a crafted PHP file. The root cause is insufficient validation of uploaded files, enabling an attacker to upload and execute arbitrary code. Multiple...