CVE-2024-1705 Shopwind Installation DefaultController.php actionCreate code injection

A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCreate of the file /public/install/controllers/DefaultController.php of the component Installation. The manipulation leads to code injection. The attack may be initiated remotely...

CVE-2024-1705 Shopwind Installation DefaultController.php actionCreate code injection

A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCreate of the file /public/install/controllers/DefaultController.php of the component Installation. The manipulation leads to code injection. The attack may be initiated remotely...

CVE-2024-1705

CVE-2024-1705 affects Shopwind up to version 4.6. The vulnerability is in the Installation component, specifically the actionCreate function of /public/install/controllers/DefaultController.php, allowing code injection. Impact is remote execution with high severity; exploitation is reported as kn...

ShopWind Security Breach

ShopWind is a B2B2C, O2O industry e-commerce system software based on the Yii2.0 framework deeply reconstructed by China ShopWind. You can easily create and publish your own brand of professional e-commerce platform for a full range of branding and product promotion. ShopWind 4.6 and previous...

CVE-2020-24925

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure...

CVE-2020-24925: Generation of Error Message Containing Sensitive Information

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure...

PT-2020-15859

Name of the Vulnerable Software and Affected Versions ElkarBackup version 1.3.3 Description A Sensitive Source Code Path Disclosure issue is found, allowing an attacker to view the path of the source code, which displays the entire source code path in the browser. This helps the attacker identify...

PT-2018-14639

Name of the Vulnerable Software and Affected Versions LuLu CMS versions prior to 2015-05-14 Description An issue was discovered that allows arbitrary file upload. This is achieved by entering a filename, directory name, and PHP code into the three text input fields in the...

CVE-2018-18771: Unrestricted Upload of File with Dangerous Type

An issue was discovered in LuLu CMS through 2015-05-14. backend\modules\filemanager\controllers\DefaultController.php allows arbitrary file upload by entering a filename, directory name, and PHP code into the three text input fields...

SQL Injection Vulnerability in IBOS Enterprise Collaboration Management Software DefaultController.php Page

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the DefaultController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain...