CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

EUVD-2023-53055

Malicious code in bioql PyPI...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031: Improper Control of Filename for Include/Require Statement in PHP Program

Directory Traversal Local File Inclusion vulnerability in Tikit now Advanced eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint...

CVE-2023-49031

The Tikit (now Advanced) eMarketing platform version 6.8.3.0 is vulnerable to a Directory Traversal (Local File Inclusion) issue. The root cause is a lack of validation on the filename parameter within the OpenLogFile endpoint. This allows an unauthenticated remote attacker to read arbitrary file...

Tikit 安全漏洞

Tikit is an IT service management platform from Tikit Inc. A security vulnerability exists in Tikit version 6.8.3.0, which stems from path traversal and allows remote attackers to read arbitrary files and obtain sensitive information...

PT-2025-9526 · Tikit · Tikit

Name of the Vulnerable Software and Affected Versions: Tikit now Advanced eMarketing platform version 6.8.3.0 Description: A Directory Traversal Local File Inclusion issue allows a remote attacker to read arbitrary files and obtain sensitive information. This is achieved by sending a crafted...