8 matches found
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...
PT-2024-39728 · WordPress · Wps Telegram Chat
Name of the Vulnerable Software and Affected Versions: WPS Telegram Chat plugin for WordPress versions up to, and including, 4.5.4 Description: The issue allows authenticated attackers with subscriber-level access and above to have full access to the Telegram Bot API endpoint and communicate with...
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...
CVE-2024-24216: Improper Neutralization of Special Elements used in a Command
Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution RCE vulnerability via the checkConnection method of /app/zentao/module/repo/model.php...
PT-2024-20320 · Zentao · Zentao
Name of the Vulnerable Software and Affected Versions: Zentao versions 18.0 through 18.10 Description: A remote code execution issue was discovered in Zentao, affecting its checkConnection method. The vulnerability can be exploited via the /app/zentao/module/repo/model.php endpoint, allowing for...
CVE-2024-24216
CVE-2024-24216 affects Zentao versions 18.0–18.10, where a remote code execution is possible via the checkConnection method in /app/zentao/module/repo/model.php. Root cause is associated with the checkConnection functionality exposed by that endpoint; the vulnerability has a high impact on confid...
