CVE-2024-41372

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php...

EUVD-2022-24667

Malicious code in bioql PyPI...

EUVD-2022-24984

Malicious code in bioql PyPI...

CVE-2024-41371

Organizr v1.90 is vulnerable to Cross Site Scripting XSS via api.php...

CVE-2024-41370

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php...

CVE-2022-1699

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

CVE-2022-1698

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

CVE-2024-41370

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php...

CVE-2024-41372

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php...

CVE-2024-41371

Organizr v1.90 is vulnerable to Cross Site Scripting XSS via api.php...

CVE-2024-41371

Organizr v1.90 is vulnerable to Cross Site Scripting XSS via api.php...

CVE-2024-41370

Organizr v1.90 contains a SQL injection vulnerability in chat/setlike.php. Root cause: improper handling of input leading to SQL injection. Impact per sources: high confidentiality, integrity, and availability risk (CVSS v3.1 base score 9.8). No patch/version containing a fix is documented in the...

CVE-2024-41372

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php...

PT-2024-29379 · Organizr · Organizr

Name of the Vulnerable Software and Affected Versions: Organizr version 1.90 Description: The issue is related to Cross Site Scripting XSS via the "api.php" endpoint. This means an attacker could potentially inject malicious scripts into the website, affecting users' sessions. Recommendations: Fo...

Organizr 安全漏洞

Organizr is a tab management system for causefx individual developers. It is intended to be a one-stop store for server front-ends. A security vulnerability exists in Organizr v1.90, which stems from a cross-site scripting XSS vulnerability via api.php...

CVE-2024-41372

CVE-2024-41372 relates to Organizr v1.90, where a SQL injection vulnerability exists in the chat/settyping.php endpoint. The issue is described across multiple sources (NVD, Red Hat, OSV, CVE listings) as a SQLi affecting the application, with high impact indicators in CVSS (CRITICAL, Confidentia...

CVE-2024-41371

Organizr v1.90 is vulnerable to Cross Site Scripting XSS via api.php...

CVE-2024-41372

Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php...

CVE-2024-41371

Organizr v1.90 is vulnerable to Cross Site Scripting XSS via api.php...

PT-2024-29380 · Organizr · Organizr

Name of the Vulnerable Software and Affected Versions: Organizr version 1.90 Description: A SQL injection issue was found in Organizr via the chat/settyping.php endpoint. This allows for potential exploitation. Recommendations: For Organizr version 1.90, consider restricting access to the...