CVE-2024-1035

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-1035 openBI Icon.php uploadIcon unrestricted upload

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-1035: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The...

PT-2024-16208 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical vulnerability has been found in openBI, affecting the uploadIcon function of the file /application/index/controller/Icon.php. The manipulation of the image argument leads to unrestricted...

CVE-2019-16525

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code...

PT-2019-14687

Name of the Vulnerable Software and Affected Versions WordPress checklist plugin versions prior to 1.1.9 Description A cross-site scripting XSS issue was found due to improper filtering of the fill parameter in the checklist-icon.php file, allowing the injection of JavaScript code. Recommendation...

CVE-2019-16525: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code...

PT-2017-7896

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2 Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and...

CVE-2005-1673

Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php, 2 tid parameter to view.php, fid parameter to 3 download.php or 4 chatdownload.php, 5 status parameter to icon.php, TICKETtid parameter to 6...

CVE-2005-1673: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php, 2 tid parameter to view.php, fid parameter to 3 download.php or 4 chatdownload.php, 5 status parameter to icon.php, TICKETtid parameter to 6...