23 matches found
CVE-2017-20156: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/preparepage.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named...
PT-2022-8021 · Unknown · Exciting Printer
Name of the Vulnerable Software and Affected Versions: Exciting Printer affected versions not specified Description: A critical issue affects the Argument Handler component, specifically the file lib/printer/jobs/prepare page.rb, where the manipulation of the URL argument leads to command...
PT-2015-6964
Name of the Vulnerable Software and Affected Versions Drupal me aliases module versions 6.x-2.x before 6.x-2.10 Drupal me aliases module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote attackers to access Views by substituting 'me' for a user id in a URL, using the 'me' user...