EUVD-2018-7076

Malware in sbrugna...

EUVD-2018-8289

Malware in sbrugna...

EUVD-2017-5826

Malware in sbrugna...

EUVD-2018-7075

Malware in sbrugna...

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2018-15198

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a user...

CVE-2018-15197

An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html that can endow administrator privileges...

CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2024-33443: Improper Control of Generation of Code

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2024-33444

A SQL injection vulnerability exists in the onethink content management framework, specifically in version v.1.1 . A remote attacker can exploit this by using a crafted script to target the ModelModel.class.php component, leading to an elevation of privilege . To mitigate risk, it is recommended ...

CVE-2024-33444: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

PT-2024-25263 · Onethink · Onethink

Name of the Vulnerable Software and Affected Versions: onethink version 1.1 Description: An issue in the software allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component. Recommendations: For onethink version 1.1, consider disabling acce...

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

CVE-2024-33443

The onethink content management framework (version 1.1 ) is vulnerable to arbitrary code execution . A remote attacker can exploit this issue by sending a crafted script to the AddonsController.class.php component. As of the current documentation, no patched version is available. To mitigate risk...

PT-2024-25264 · Onethink · Onethink

Name of the Vulnerable Software and Affected Versions: onethink version 1.1 Description: A SQL injection issue allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component. Recommendations: For onethink version 1.1, consider restricting access to the...