13 matches found
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...
Server-side Request Forgery (SSRF)
Overview hillelcoren/invoice-ninja is an Invoices, expenses & time-tracking built with Laravel Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the CheckDatabaseRequest.php process. An attacker can make unauthorized requests to internal or external systems ...
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...
CVE-2026-29925
The Invoice Ninja application (specifically versions v5.12.46 and v5.12.48 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the CheckDatabaseRequest.php process, where an attacker can supply crafted input to make unauthorized requests to internal or external system...
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...
Fiyo CMS Arbitrary File Deletion Vulnerability (CNVD-2017-26594)
Fiyo CMS is a content management system CMS for creating CMS templates. A security vulnerability exists in the dapur\apps\appconfig\controller\backuper.php file in Fiyo CMS version 2.0.7. The vulnerability can be exploited by a remote attacker to delete arbitrary files using the 'file' parameter ...
PT-2016-4118
Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 6.0.x through 6.0.1.12 IBM UrbanCode Deploy versions 6.1.x through 6.1.3.2 IBM UrbanCode Deploy versions 6.2.x through 6.2.1.0 Description The issue allows remote authenticated users to obtain sensitive cleartext...
CVE-2016-0267: Exposure of Sensitive Information to an Unauthorized Actor
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via 1 the server UI or 2 a database request...
PHP PDO out-of-boundaures access
Out-of-bounds access via precompiled database request...
CVE-2008-6493
Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database/News.mdb...