CVE-2022-4606

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

Remote file inclusion

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606

CVE-2022-4606 is a PHP Remote File Inclusion vulnerability impacting FlatPress (flatpress/flatpress) prior to version 1.3. Multiple connected sources corroborate the issue and describe an RFI leading to remote code execution via the uploader/media manager workflow (PoC demonstrated in Huntr entry...

FlatPress 安全漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4446

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

Remote file inclusion

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

PT-2022-27224 · Tsolucio · Corebos

Name of the Vulnerable Software and Affected Versions: corebos versions prior to 8.0 Description: The issue is related to PHP Remote File Inclusion in the GitHub repository tsolucio/corebos. Recommendations: For versions prior to 8.0, update to version 8.0 or later to resolve the issue...

CVE-2022-4446

CVE-2022-4446 is a PHP Remote File Inclusion vulnerability affecting coreBOS (GitHub: tsolucio/corebos) prior to version 8.0. The issue stems from how install/ConfirmMigrationConfig.php accepts a source_directory parameter and stores it in the session, which is later used by install/MigrationDbBa...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

Remote file inclusion

Remote desktop takeover via phishing...

Remote file inclusion

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings...

Dompdf allows remote file inclusion because URI validation failure does not halt font registration

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...

GHSA-6X28-7H8C-CHX4 Dompdf allows remote file inclusion because URI validation failure does not halt font registration

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...

CVE-2022-41343

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...

Remote file inclusion

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule...