EUVD-2025-141940

Malicious code in goodafin-nuig-gii npm...

EUVD-2023-0322

Malicious code in bioql PyPI...

EUVD-2023-46123

Malicious code in bioql PyPI...

EUVD-2022-7771

Malicious code in bioql PyPI...

CVE-2022-34297

Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field...

CVE-2020-36655

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

Remote code execution

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

CVE-2023-41630 affects eSST Monitoring v2.147.1, where the Gii code generator component enables a remote code execution (RCE) vulnerability. The issue is described as an RCE via Gii, with high impact on confidentiality, integrity, and availability as reflected in the CVSS 3.1 score. Public source...

eSST Monitoring Code Injection Vulnerability

Sourceforge eSST Monitoring is an open source monitoring system from Sourceforge. A security vulnerability exists in eSST Monitoring version v2.147.1, which stems from a Remote Code Execution RCE vulnerability in the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

GHSA-3MPG-Q26J-83J5 Command injection in yiisoft/yii2-gii

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

CVE-2020-36655

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

CVE-2020-36655

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

Design/Logic Flaw

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

CVE-2020-36655

Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file...

CVE-2020-36655

CVE-2020-36655 affects Yii2 Gii prior to 2.2.2. The issue lets remote attackers exploit Generator.php messageCategory to embed arbitrary PHP code into a model file, enabling remote code execution (network vector, no user interaction). Remediation: upgrade to Yii2 Gii 2.2.2 or later.