17066 matches found
Altus Cars Lotus Cars Android app 安全漏洞
Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...
CVE-2012-10059
Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...
UBUNTU-CVE-2012-10059
Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...
CVE-2012-10059
Dolibarr ERP/CRM contains a post-authenticated OS command injection in its database backup feature. In versions <= 3.1.1 and
CVE-2012-10059 Dolibarr ERP/CRM Post-Auth OS Command Injection
Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...
CVE-2012-10059 Dolibarr ERP/CRM Post-Auth OS Command Injection
Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...
CVE-2012-10059
Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...
PT-2025-33094
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions prior to 3.1.1 Dolibarr ERP/CRM versions prior to 3.2.0 Description: Dolibarr ERP/CRM contains a post-authenticated operating system command injection issue in its database backup feature. The export.php script does...
The vulnerability of the software for cloud backup and data recovery solutions from IBM Cloud Pak System lies in the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary HTML code.
The vulnerability of the software for cloud backup and data recovery solutions from IBM Cloud Pak System relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code remotely...
Dolibarr ERP/CRM 安全漏洞
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A security vulnerability exists in Dolibarr ERP/CRM versions...
CVE-2025-40746
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...
CVE-2025-40746
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...
CVE-2025-40746
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...
CVE-2025-40746
SIMATIC RTLS Locating Manager (versions prior to V3.2) contains an input validation issue in the backup script path that can be exploited by an authenticated remote attacker with high privileges to execute arbitrary code with SYSTEM privileges. Multiple connected sources (Red Hat CVE page, NVD en...
CVE-2025-40746
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...
CVE-2025-40746: Improper Input Validation
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...
PT-2025-32653 · Siemens · Simatic Rtls Locating Manager
Name of the Vulnerable Software and Affected Versions: SIMATIC RTLS Locating Manager versions prior to V3.2 Description: A vulnerability exists in SIMATIC RTLS Locating Manager that allows an authenticated remote attacker with high privileges to execute arbitrary code with 'NT Authority/SYSTEM'...
Siemens SIMATIC RTLS Locating Manager 输入验证错误漏洞
Siemens SIMATIC RTLS Locating Manager is an RTLS locating manager from Siemens, Germany. An input validation error vulnerability exists in Siemens SIMATIC RTLS Locating Manager versions prior to V3.2, which stems from improper validation of inputs to backup scripts, and could lead to the executio...