ProjectSend（cFTP） 安全漏洞

ProjectSend cFTP is an open-source hosted application based on PHP and MySQL. Version r1945 and earlier of ProjectSend cFTP have security vulnerabilities. These vulnerabilities stem from incorrect handling of the parameter ldapemail in the file includes/Classes/Auth.php, which may lead to differe...

CVE-2025-12342

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

EUVD-2007-3181

Malware in sbrugna...

EUVD-2007-3182

Malware in sbrugna...

EUVD-2007-3526

Malware in sbrugna...

EUVD-2005-0647

Malware in sbrugna...

EUVD-2004-0240

Malware in sbrugna...

EUVD-2006-0087

Malware in sbrugna...

EUVD-2008-6880

Malware in sbrugna...

EUVD-2009-4663

Malware in sbrugna...

EUVD-2023-1052

Malicious code in bioql PyPI...

CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

CVE-2023-24774

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php...

SQL Injection

funadmin/funadmin is vulnerable to SQL Injection. The vulnerability is due to improper validation of the parentField parameter in the index method of \backend\controller\auth\Auth.php...

SQL Injection

funadmin/funadmin is vulnerable to SQL Injection. The vulnerability is due to improper handling of the selectFields parameter in the index method of \backend\controller\auth\Auth.php, which allows an attacker to manipulate database queries...

GHSA-2MV8-JJM5-F3HR SQL injection in funadmin

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

SQL injection in funadmin

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...