PT-2024-15716 · Zhihuiyun · Zhihuiyun

Name of the Vulnerable Software and Affected Versions: ZhiHuiYun versions up to 4.4.13 Description: A critical issue affects the function download network image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side...

Sql injection

A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of the file app/controllers/imagecontroller.rb. The manipulation of the argument sol leads to sql injection. The patch is named...

PT-2023-10137 · Unknown · Corincerami Curiosity

Name of the Vulnerable Software and Affected Versions: corincerami curiosity affected versions not specified Description: A critical vulnerability was found in corincerami curiosity, affecting an unknown functionality of the file app/controllers/image controller.rb. The manipulation of the sol...

CVE-2021-43685

libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function...