CVE-2024-6160

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session cookies or modify the content of pages. This issue affects MegaBIP software versions through 5.12.1...

CVE-2024-6160 SQL Injection in MegaBIP

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session cookies or modify the content of pages. This issue affects MegaBIP software versions through 5.12.1...

CVE-2024-6160 SQL Injection in MegaBIP

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session cookies or modify the content of pages. This issue affects MegaBIP software versions through 5.12.1...

CVE-2024-6160

CVE-2024-6160 is a SQL Injection vulnerability in MegaBIP software (affected through 5.12.1) that can disclose database contents, obtain session cookies, or modify page content. The issue affects MegaBIP as a whole; the connected documents do not specify affected subcomponents, versions beyond 5....

CVE-2024-6160: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in MegaBIP software allows attacker to disclose the contents of the database, obtain session cookies or modify the content of pages. This issue affects MegaBIP software versions through 5.12.1...

PT-2024-37421

Name of the Vulnerable Software and Affected Versions: MegaBIP software versions through 5.12.1 Description: The issue allows an attacker to disclose the contents of the database, obtain session cookies, or modify the content of pages. Recommendations: For MegaBIP software versions through 5.12.1...

MegaBIP SQL Injection Vulnerability

MegaBIP is a software for creating BIP websites. A security vulnerability exists in MegaBIP version 5.12.1 and prior versions. An attacker could exploit the vulnerability to disclose database content, obtain a session cookie, or modify page content...

CVE-2024-1659

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server including a PHP code file without an authentication. This issue affects MegaBIP software versions through 5.10...

CVE-2024-1576

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09...

CVE-2024-1659

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server including a PHP code file without an authentication. This issue affects MegaBIP software versions through 5.10...

CVE-2024-1576

SQL Injection vulnerability in MegaBIP software allows attacker to obtain site administrator privileges, including access to the administration panel and the ability to change the administrator password. This issue affects MegaBIP software versions through 5.09...

CVE-2024-1577

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...

CVE-2024-1577

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...

CVE-2024-1659 Arbitrary File Upload in MegaBIP

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server including a PHP code file without an authentication. This issue affects MegaBIP software versions through 5.10...

CVE-2024-1659

CVE-2024-1659 describes an Arbitrary File Upload vulnerability in MegaBIP software, affecting versions up to 5.10. The issue allows an unauthenticated attacker to upload arbitrary files to the server, including PHP code, enabling potential in-server code execution or defacement as implied by the ...

CVE-2024-1659 Arbitrary File Upload in MegaBIP

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server including a PHP code file without an authentication. This issue affects MegaBIP software versions through 5.10...

CVE-2024-1577 Remote Code Execution in MegaBIP

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...

CVE-2024-1577

CVE-2024-1577 describes a Remote Code Execution in MegaBIP software, allowing unauthenticated arbitrary code execution by saving attacker-crafted PHP code to a website file. Affected: MegaBIP software versions up to 5.11.2. The connected documents do not provide any further technical details (e.g...

CVE-2024-1577 Remote Code Execution in MegaBIP

Remote Code Execution vulnerability in MegaBIP software allows to execute arbitrary code on the server without requiring authentication by saving crafted by the attacker PHP code to one of the website files. This issue affects MegaBIP software versions through 5.11.2...

CVE-2024-1576

CVE-2024-1576 is a SQL Injection vulnerability in MegaBIP software (affected through version 5.09) that can let an attacker gain site administrator privileges, including access to the admin panel and the ability to change the administrator password. This vulnerability’s details are supported by a...