PT-2026-94834

Name of the Vulnerable Software and Affected Versions HortusFox-Web versions prior to 6.1 Description Authenticated administrators can execute arbitrary operating system commands as the web server user by abusing the Import/Export functionality. This feature, designed for data portability, can be...

CVE-2026-34051: Improper Authorization

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access control on the Import/Export functionality, allowing unauthorized users to perform import and export actions through direct request manipulati...

EUVD-2021-28547

Malicious code in bioql PyPI...

EUVD-2022-4272

Malicious code in bioql PyPI...

CVE-2019-8227

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML...

CVE-2019-8227

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML...

PT-2019-18941

Name of the Vulnerable Software and Affected Versions Magento versions prior to 1.9.4.3 Magento versions prior to 1.14.4.3 Description The issue allows an authenticated user with limited administrative privileges to inject arbitrary JavaScript code via import/export functionality when creating...

CVE-2014-4844: Undefined Security Weakness

The import/export functionality in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 allows remote authenticated users to bypass intended access restrictions via a project action for a 1 process application or 2 toolkit...