164 matches found
Osclass Security Advisory 3.4.1 - Local File Inclusion
A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. id: CVE-2014-6308 info: name: Osclass Security Advisory 3.4.1 - Local File Inclusion author: daffainfo...
CVE-2026-113381
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...
CVE-2026-113381 Osclass Item Model Item.php findUserItems sql injection
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...
EUVD-2026-104877
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...
CVE-2026-113381
A SQL injection vulnerability exists in Osclass up to version 8.3.1 . The flaw is located within the Item Model Handler component, specifically in the Item::findUserItems function of the file oc-includes/osclass/model/Item.php. The root cause is the improper handling of the sPattern argument, whi...
CVE-2026-113381 Osclass Item Model Item.php findUserItems sql injection
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...
PT-2026-118314
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...
Osclass input validation vulnerability
Osclass 8.3.1 and earlier versions have a security vulnerability. This vulnerability stems from improper handling of the parameter sPattern in the Item::findUserItems function in the file oc-includes/osclass/model/Item.php. It may lead to remote SQL injection attacks...
Osclass Security Advisory 3.4.1 - Local File Inclusion Detection
A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in OSClass before 3."""...
WS-2018-0185
The cross-site scripting vulnerability can be triggered by an authenticated administrator visiting a malicious link. Since osClass allows a user by default to upload images via AJAX, an attacker can attach PHP code to the EXIF data in form of an image description. The administration module of...
📄 glFusion 1.3.0 Blind SQL Injection
A critical blind SQL Injection vulnerability exists in glFusion CMS version 1.3.0, affecting the Media Gallery search functionality. The vulnerability allows unauthenticated remote attackers to execute arbitrary SQL commands and potentially compromise the entire database. This is older research...
EUVD-2014-7933
Malware in sbrugna...
EUVD-2018-6398
Malware in sbrugna...
EUVD-2016-1745
Malware in sbrugna...
EUVD-2012-0996
Malware in sbrugna...
EUVD-2014-7932
Malware in sbrugna...
EUVD-2012-5086
Malware in sbrugna...
EUVD-2012-5085
Malware in sbrugna...