CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Angular-Base64-Upload ライブラリを介した未認証のリモートコード実行 詳細はこちら: ブログ はじめに angular-base64-upload の v0.1.21 より前のバージョンは、angular-base64-upload/demo/server.php エンドポイントを介した未認証のリモートコード実行に対して脆弱です。この脆弱性を悪用すると、攻撃者は任意のファイルコンテンツをサーバーにアップロードでき、その後 angular-base64-upload/demo/uploa...

CVE-2024-42640

CVE-2024-42640 Angular-Base64-Upload ライブラリを介した未認証のリモートコード実行 CVE-2024-42640 angular-base64-upload の v0.1.21 より前のバージョンは、angular-base64-upload/demo/server.php エンドポイントを介した未認証のリモートコード実行に対して脆弱です。この脆弱性を悪用すると、攻撃者は任意のファイル内容をサーバーにアップロードでき、その後 angular-base64-upload/demo/uploads...

EUVD-2026-84979

A vulnerability was determined in Mstfakts College-Management-System. This affects the function sessionstart of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-95828

A vulnerability was determined in Mstfakts College-Management-System. This affects the function sessionstart of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-95828 Mstfakts College-Management-System Authentication server.php session_start session fixiation

A vulnerability was determined in Mstfakts College-Management-System. This affects the function sessionstart of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86215

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2026-86215: Insufficient Session Expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2026-37552: Deserialization of Untrusted Data

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server Server.php:87 receives data from a TCP socket, passes it directly to Opis\Closure\unserialize, then executes the result via calluserfunc. No authentication or signature verification exists on the...

CVE-2022-27245

An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF...

CVE-2019-12939

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...

EUVD-2019-4515

Malware in sbrugna...

EUVD-2006-3744

Malware in sbrugna...

EUVD-2018-9143

Malware in sbrugna...

CVE-2025-7102 BoyunCMS Server.php sql injection

A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-7102 BoyunCMS Server.php sql injection

A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has...

BoyunCMS 安全漏洞

BoyunCMS is an enterprise content management system from China Boyun Boyun Company. A security vulnerability exists in BoyunCMS 1.4.20 and earlier versions, which originates from improper handling of the parameter phone in the file application/update/controller/Server.php, which may lead to SQL...

CVE-2025-7102: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has...

PT-2025-28097 · Boyuncms · Boyuncms

Name of the Vulnerable Software and Affected Versions: BoyunCMS versions up to 1.4.20 Description: A critical issue has been identified, affecting the file application/update/controller/Server.php. The manipulation of the phone argument leads to SQL injection. This issue can be exploited remotely...

Remote Code Execution (RCE)

angular-base64-upload is vulnerable to Remote Code Execution RCE. The vulnerability is due to a lack of proper access controls in demo/server.php, allowing attackers to upload arbitrary content, which can then be executed from demo/uploads...

CVE-2024-42640: Unrestricted Upload of File with Dangerous Type

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of...