4 matches found
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50658
A Server-Side Template Injection (SSTI) vulnerability exists in iPublish AdPortal version 3.0.39 . This flaw allows a remote attacker to execute arbitrary code by exploiting the shippingAsBilling and firstname parameters within the updateuserinfo.html file. As a temporary workaround, it is recomm...