CVE-2022-27256: URL Redirection to Untrusted Site

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

CVE-2020-12743

An issue was discovered in Gazie 7.32. A successful installation does not remove or block or in any other way prevent use of its own file /setup/install/setup.php, meaning that anyone can request it without authentication. This file allows arbitrary PHP file inclusion via a hiddenreq POST paramet...

PT-2020-13235

Name of the Vulnerable Software and Affected Versions Gazie version 7.32 Description A security issue was found where the installation of Gazie does not properly secure its own file /setup/install/setup.php. This allows unauthorized access to the file, which can be exploited to include arbitrary...