CVE-2024-1113 openBI Unity.php uploadUnity unrestricted upload

A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadUnity of the file /application/index/controller/Unity.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-1113

CVE-2024-1113 affects openBI up to v1.0.8, targeting the uploadUnity function in /application/index/controller/Unity.php. The root cause is manipulation of the file argument, enabling unrestricted remote file uploads. Multiple sources confirm the vulnerability and its public disclosure. A practic...

openBI 代码注入漏洞

openBI is a big data visualization solution from openBI. A code injection vulnerability exists in openBI 1.0.8 and earlier versions, which stems from a problem with the index function in the /application/index/controller/Screen.php file, which could lead to code injection. Currently there are no...

openBI 访问控制错误漏洞

openBI is a big data visualization solution from openBI, Inc. An access control error vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the dlfile function in the /application/index/controller/Screen.php file that could lead to incorrect access control...

CVE-2024-1114: Improper Access Control

A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. The attack can be initiated remotely. T...

CVE-2024-1117: Improper Control of Generation of Code

A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injection. The attack can be launched remotely. The...

PT-2024-16780 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue was found in openBI, affecting the uploadUnity function of the file /application/index/controller/Unity.php. The manipulation of the file argument leads to unrestricted upload. It is...

PT-2024-16784 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found, affecting the dlfile function of the file /application/index/controller/Screen.php. The manipulation of the fileUrl argument leads to improper access controls. The atta...

PT-2024-16789 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue affects the dlfile function of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiat...

PT-2024-16797 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found in the function index of the file /application/index/controller/Screen.php. The manipulation of the fileurl argument leads to code injection. This issue can be exploited...

CVE-2024-1115: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...

PT-2024-16793 · Openbi · Openbi

Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue has been found, affecting the function index of the file /application/plugins/controller/Upload.php. This leads to unrestricted upload and can be exploited remotely. The issue has been...

openBI Code Issues Vulnerabilities

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem in the index function of the /application/plugins/controller/Upload.php file, which could lead to unrestricted file uploads...

CVE-2024-1113: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadUnity of the file /application/index/controller/Unity.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The...

openBI 操作系统命令注入漏洞

openBI is a big data visualization solution from openBI Inc. An OS command injection vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the dlfile function of the /application/websocket/controller/Setting.php file, which could lead to OS command injection...

openBI 代码问题漏洞

openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem with the uploadUnity function of the /application/index/controller/Unity.php file, which could lead to unrestricted file uploads...

CVE-2024-1116: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-1036

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2024-1036

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2024-1036

CVE-2024-1036 (openBI) : A vulnerability in openBI up to 1.0.8 affects the function uploadIcon in /application/index/controller/Screen.php (Icon Handler), enabling unrestricted uploads. Documents consistently describe a remote attack that can be exploited publicly; CVSS/impact notes vary, but all...