Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/09 8:36 p.m.11 views

GHSA-7JX7-3846-M7W7 Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Relationship to Previously Patched Vulnerability This vulnerability is in addition to the RCE vulnerability patched in GHSA-255j-qw47-wjh5. That advisory addressed a similar RCE vulnerability that affected two specific routes: - /index.php?p=admin%2Factions%2Ffields%2Fapply-layout-element-setting...

8.6CVSS6.3AI score0.0097EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/02/09 8:36 p.m.14 views

Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Relationship to Previously Patched Vulnerability This vulnerability is in addition to the RCE vulnerability patched in GHSA-255j-qw47-wjh5. That advisory addressed a similar RCE vulnerability that affected two specific routes: - /index.php?p=admin%2Factions%2Ffields%2Fapply-layout-element-setting...

8.6CVSS6.3AI score0.0097EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/02 12:0 a.m.9 views

PT-2025-44738

Name of the Vulnerable Software and Affected Versions itsourcecode Online Loan Management System version 1.0 Description A flaw exists in itsourcecode Online Loan Management System that allows for SQL injection. This issue affects an unspecified part of the /load fields.php file. The loan id...

9.8CVSS6.8AI score0.00374EPSS
SaveExploits1References9
Rows per page
Query Builder