7 matches found
php_filter_chains_oracle_exploit_for_CVE-2023-6199
Cadenas de filtros PHP: lectura de archivos desde oráculo basado en errores. Script actualizado para explotar CVE-2023-6199 Una CLI para explotar parámetros afectados por la lectura de archivos causada por el oráculo basado en errores de las cadenas de filtros PHP. Puede usarse para filtrar el...
CVE-2023-6199
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
Server side request forgery (ssrf)
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199 Book Stack v23.10.2 - LFR via Blind SSRF
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199 Book Stack v23.10.2 - LFR via Blind SSRF
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
EUVD-2023-58447
Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...
CVE-2023-6199
The CVE-2023-6199 entry concerns Book Stack (BookStack) v23.10.2 with a Server-Side Request Forgery flaw that enables Local File Read via SSRF. The connected exploits/documentation show an attack chain using php://filter to read server files (e.g., /etc/passwd) by abusing the SSRF entry point ( o...