107 matches found
CVE-2023-46304
CVE-2023-46304 VTiger 오픈소스 CRM v7.5에서의 인증된 원격 코드 실행 요약 VTiger CRM 오픈소스 버전 7.5.0의 현재 릴리스에 있는 Users 모듈에 취약점이 존재합니다. 이 취약점은 인증된 공격자가 임의의 PHP 코드를 작성하여 config.inc.php에 실행시킬 수 있도록 합니다. 익스플로잇 상세 정보 사용자가 VTiger에 정상적으로 인증되면, 시스템은 사용자의 설정 상태를 확인하여 아직 완전히 구성되지 않은 새 사용자인지 확인합니다. 또한 첫 번째 사용자인지 확인합니다. 즉, 특정 글로...
CVE-2026-85401
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401 Dolibarr Legacy File Manager config.inc.php access control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
EUVD-2026-70872
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-85401
CVE-2026-85401 affects Dolibarr (versions up to 21.0.4, 22.0.5, and 23.0.3) in the Legacy File Manager component, specifically in the file htdocs/core/filemanagerdol/connectors/php/config.inc.php. The vulnerability is an improper access control flaw exploitable remotely with low privileges, yield...
CVE-2026-85401: Improper Access Control
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
PT-2026-85389
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
CVE-2026-11619: Improper Authorization
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. The impacted element is an unknown function of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy Filemanager. The manipulation leads to improper authorization. It is possible to initiate the...
EUVD-2007-5084
Malware in sbrugna...
CVE-2024-11123: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the...
CVE-2023-46304
modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file executed on every page load...
CVE-2023-46304
Vtiger CRM version 7.5.0 is vulnerable to Remote Code Execution (RCE) due to a flaw in modules/Users/models/Module.php. An authenticated attacker can exploit an unprotected endpoint to write arbitrary PHP code into the config.inc.php file, which is executed on every page load. Technical analysis ...
CVE-2023-46304: Improper Neutralization of Special Elements in Output Used by a Downstream Component
modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file executed on every page load...
Code injection
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...
CVE-2023-43835
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...
CVE-2023-43835: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when settings overwrite config.inc.php content...
Super Store Finder 3.7 Remote Command Execution Vulnerability
Vulnerability : Authenticated Arbitrary PHP Code Injection lead to Remote Code Execution Researcher : Etharus Vendor : Joe Iz, https://www.superstorefinder.net/ Demo Url : https://superstorefinder.net/products/superstorefinder/ Version Affected : 3.7 and below Date : 18 September 2023 FOFA Dork :...
Super Store Finder 3.7 Remote Command Execution
Vulnerability : Authenticated Arbitrary PHP Code Injection lead to Remote Code Execution Researcher : Etharus Vendor : Joe Iz, https://www.superstorefinder.net/ Demo Url : https://superstorefinder.net/products/superstorefinder/ Version Affected : 3.7 and below Date : 18 September 2023 FOFA Dork :...