CVE-2020-4257

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2019-4062

IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007...

CVE-2019-4062

CVE-2019-4062 affects IBM i2 Intelligent Analyis Platform versions 9.0.0 through 9.1.1, due to an XML External Entity (XXE) vulnerability when processing XML data. A remote attacker could potentially expose sensitive information or exhaust memory resources. The issue is confirmed in multiple sour...

phpTrafficA 1.4.2 - pageid SQL Injection

phpTrafficA 1.4.2 - pageid SQL Injection Application: phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerable to directory transversal ===== 4Credits ===== laurent gaffie conta...