10 matches found
EUVD-2019-2079
Malware in sbrugna...
CVE-2019-10015
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...
baigoStudio baigoSSO Code Injection Vulnerability
baigoStudio baigoSSO is a single sign-on system. A security vulnerability exists in baigoStudio baigoSSO v3.0.1. The vulnerability can be exploited by a remote attacker to execute arbitrary PHP code via the site name field in the base configuration...
CVE-2019-10015
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...
CVE-2019-10015
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...
Design/Logic Flaw
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...
CVE-2019-10015
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...
CVE-2019-10015
CVE-2019-10015 affects baigoStudio baigoSSO v3.0.1. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying payload in the first form field of the configuration screen, where the code is written to BG_SITE_NAME in opt_base.inc.php. This results in remote code executio...
PT-2019-11287
Name of the Vulnerable Software and Affected Versions: baigoStudio baigoSSO version 3.0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen. This is possible because the code is written to the BG SITE NAME field in the...
CVE-2019-10015: Improper Control of Generation of Code
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...