CVE-2024-31666

漏洞概述 Flusity-CMS v.2.33 中存在一个漏洞，允许远程攻击者通过精心构造的脚本在 editaddonpost.php 组件中执行任意代码。 影响版本 Flusity-CMS v.2.33 漏洞细节 攻击者可以通过向 editaddonpost.php 组件发送精心构造的脚本来利用该漏洞，从而在目标服务器上执行任意代码。 影响 此漏洞可能会导致攻击者在服务器上执行任意代码，从而可能控制整个服务器。 发现者：胡诗雅...

CVE-2024-31666

Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows a remote attacker to execute arbitrary code via a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details An attacker can exploit this vulnerability by sending a...

EUVD-2024-22748

Malicious code in bioql PyPI...

EUVD-2023-58093

Malicious code in bioql PyPI...

EUVD-2024-20619

Malicious code in bioql PyPI...

EUVD-2023-58095

Malicious code in bioql PyPI...

EUVD-2024-24862

Malicious code in bioql PyPI...

EUVD-2023-58094

Malicious code in bioql PyPI...

EUVD-2023-58076

Malicious code in bioql PyPI...

EUVD-2024-23754

Malicious code in bioql PyPI...

CVE-2024-32418

An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the addaddon.php component...

CVE-2024-31666

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-27757

flusity CMS through 2.45 allows tools/addonsmodel.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."...

CVE-2024-25417

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...

CVE-2024-25502

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...

CVE-2024-25418

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...

CVE-2024-25410

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in updatesetting.php...

CVE-2024-23094

Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /cover/addons/infomediagallery/action/editaddonpost.php...

CVE-2024-27680

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...