10691 matches found
WeBid 代码问题漏洞
WeBid is an open source auction site building solution. A security vulnerability exists in WeBid 1.2.2 and earlier versions, which stems from a server-side request forgery SSRF vulnerability in the admin/theme.php file that allows remote attackers to inject a payload via theme parameters to read...
CVE-2022-41477
A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...
PT-2022-6049 · Atlassian · Jira Align
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Align versions prior to 10.109.2 Description: The issue is related to a Server-Side Request Forgery SSRF in the ManageJiraConnectors API component of the Jira Align platform. This can be exploited by a remote, unauthenticated...
CVE-2022-41497
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...
CVE-2022-41495
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...
Server side request forgery (ssrf)
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...
Server side request forgery (ssrf)
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
Server side request forgery (ssrf)
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...
CVE-2022-41497
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...
CVE-2022-41497
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...
PT-2022-25892 · Unknown · Clippercms
Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the rss url news parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avo...
CVE-2022-41496
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...
CVE-2022-41496
CVE-2022-41496 affects iCMS v7.0.16 with a Server-Side Request Forgery (SSRF) via the url parameter in admincp.php. CVSSv3.1 base score 9.8 (CRITICAL) — network access, no user interaction required. Connected documents confirm the SSRF issue; PT-2022 offers a workaround: avoid or restrict the url...
PT-2022-25894 · Unknown · Clippercms
Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the pkg url parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avoid usi...
CVE-2022-41497
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...
CVE-2022-41495
CVE-2022-41495 affects ClipperCMS 1.3.3 and is a Server-Side Request Forgery (SSRF) vulnerability exploitable via the rss_url_news parameter at /manager/index.php. The CVSS shows Network attack, no user interaction, with high impact on confidentiality, integrity, and availability (base score 9.8)...
CVE-2022-41495
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...
CVE-2022-41497
CVE-2022-41497 affects ClipperCMS 1.3.3, where a Server-Side Request Forgery (SSRF) can be triggered via the pkg_url parameter at /manager/index.php. The CVSS v3.1 vector indicates a critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a base score of 9.8. Exploitation is referenced in a co...