CVE-2024-48234

An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAddress parameter is not processed and is directly passed into curlexec execution and output, resulting in Server-side request forgery SSRF vulnerability that can read server file...

CVE-2024-48232

The mipjz content management system version 5.0.5 is vulnerable to a Server-side request forgery (SSRF) vulnerability. The root cause is located in the mipPost method of the app\{settingackslash controllerackslash ApiAdminTool.php file, where the postAddress parameter is not processed and is di...