278 matches found
FacturaScripts - Unauthenticated phpinfo Disclosure
Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication. id: CVE-2026-42878 info: name:...
CVE-2026-25513
CVE-2026-25513: SQL-инъекция в выражении ORDER BY API FacturaScripts Обзор Поле| Детали ---|--- Идентификатор CVE| CVE-2026-25513 Серьёзность| ВЫСОКАЯ Уведомление| Просмотреть уведомление Обнаружил| Lukasz Rybak Затронутые продукты facturascripts/facturascripts версии: 2025.81 Классификация CWE...
CVE-2026-42879
CVE-2026-42879 - FacturaScripts - Аутентифицированная неограниченная загрузка файлов через обход MIME-типа Краткое описание В функциональности загрузки изображений товаров в FacturaScripts существует уязвимость аутентифицированной неограниченной загрузки файлов. Злоумышленник с действительными...
CVE-2026-25514
CVE-2026-25514: SQL-инъекция в FacturaScripts в действиях автозаполнения Обзор Поле| Детали ---|--- CVE ID| CVE-2026-25514 Серьёзность| ВЫСОКАЯ Уведомление| Посмотреть уведомление Обнаружил| Lukasz Rybak Затронутые продукты facturascripts/facturascripts версии: 2025.81 Классификация CWE CWE-20:...
cve-2026-32699-facturascripts-nick-bypass
CVE-2026-32699 - Нарушенный контроль доступа через параметр Nick в EditUser в FacturaScripts Описание Краткое описание Приложение не проверяет параметр nick при POST-запросе к контроллеру EditUser. Хотя интерфейс не позволяет редактировать это поле, пользователь может обойти это ограничение с...
Exploit for CVE-2026-104905
CVE-2026-104905 — PHP Object Injection in FacturaScripts Widg...
CVE-2026-104905
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
EUVD-2026-92525
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905 FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905 FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905 FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905
FacturaScripts versions prior to 2026.7 are vulnerable to a PHP object injection vulnerability within the WidgetSelect::processFormData() function. The root cause is the application's failure to apply an allowed_classes filter when calling unserialize() on raw POST data for multiple-select fields...
PT-2026-106051
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowed classes filter for multiple-select fields. Attackers can submit a serialized XLSXWrite...
CVE-2026-104905: Deserialization of Untrusted Data
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
SQL Injection
FacturaScripts is vulnerable to SQL Injection. The vulnerability is due to improper validation and escaping of user-controlled filter field names in sqlColumn, which allows an attacker to inject arbitrary SQL through API filter parameters and retrieve data from arbitrary database tables...
CSV Injection (Formula Injection)
FacturaScripts is vulnerable to CSV Injection Formula Injection. The vulnerability is due to insufficient sanitization of spreadsheet formula prefix characters during CSV export, which allows an attacker to inject malicious formulas that execute when an administrator opens the exported CSV file i...
Cross-site Scripting (XSS)
FacturaScripts is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper encoding of user-controlled referencia and codsubcuenta values in JavaScript within HTML onclick attributes, which allows an attacker to inject and execute arbitrary JavaScript when a user opens the...
GHSA-HGJX-R89M-M7V4 FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE
Summary FacturaScripts\Core\UploadedFile::move$destiny, $destinyName concatenates $destiny and $destinyName without normalizing the resulting path. Every caller in the codebase passes UploadedFile::getClientOriginalName — the unsanitized client-supplied filename — as $destinyName, so an...
