CVE-2025-1981 SQL Injection in Ready_

Improper neutralization of input provided by a low-privileged user into a file search functionality in Ready's Invoices module allows for SQL Injection attacks...

CVE-2025-1980

CVE-2025-1980 concerns the Ready_ application where the Profile section allows uploading files of any type/extension without restriction. If the server is misconfigured (as noted around 2021–2022 deployments), this can lead to Remote Code Execution. The (NVD) entry lists a CRITICAL impact with CV...

CVE-2025-1980 Remote Code Execution via Unrestricted File Upload in Ready_

The Ready application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was by default when installed at the turn of 2021 and 2022, it can result in Remote Code Execution. Refer to the Required Configuration for...

CVE-2025-1980: Unrestricted Upload of File with Dangerous Type

The Ready application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was by default when installed at the turn of 2021 and 2022, it can result in Remote Code Execution. Refer to the Required Configuration for...

CVE-2025-1983: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...