PT-2023-18728 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 25.0 Description: The issue allows for CSRF attacks related to tiki-importer.php and tiki-import sheet.php. Recommendations: For versions prior to 25.0, update to version 25.0 or later to resolve the issue...

CVE-2023-22851

Tiki before 24.2 allows lib/importer/tikiimporterblogwordpress.php PHP Object Injection by an admin because of an unserialize call...

Tiki Wiki CMS Groupware 代码问题漏洞

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite. A security vulnerability exists in Tiki Wiki CMS Groupware version 24.1 and earlier, which stems from PHP object injection in tikiimporterblogwordpress.php...

Tiki Wiki CMS Groupware 24.1 tikiimporter_blog_wordpress.php PHP Object Injection

---------------------------------------------------------------------------------------------------- Tiki Wiki CMS Groupware input type="...

Tiki Wiki CMS Groupware 跨站请求伪造漏洞

Tiki is a suite of open source content management and portal applications from the Tiki community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware 25.0 and earlier versions,...

AZL-33573 CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate...

SUSE: Security Advisory (SUSE-SU-2022:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2022:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4191-1 advisory. This update rebuilds the current containeried data importer images against current base images, to fix security issues. Tenabl...

SUSE-SU-2022:4191-1 Security update for containerized-data-importer

This update rebuilds the current containeried data importer images against current base images, to fix security issues...

PT-2022-37534 · Unknown · Data Importer

Name of the Vulnerable Software and Affected Versions: data importer affected versions not specified Description: The issue is related to security problems in the data importer. To address this, an update rebuilds the current containerized data importer images against current base images...

SUSE: Security Advisory (SUSE-SU-2022:3970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2022:3970-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3970-1 advisory. This update rebuilds the current containeried data importer images against current base images, to fix security issues. Tenabl...

SUSE-SU-2022:3970-1 Security update for containerized-data-importer

This update rebuilds the current containeried data importer images against current base images, to fix security issues...

SUSE: Security Advisory (SUSE-SU-2022:3920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2022:3920-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3920-1 advisory. This update of containerized data importer images rebases the containers against the current base images to resolve security...

SUSE-SU-2022:3920-1 Security update for containerized data importer

This update of containerized data importer images rebases the containers against the current base images to resolve security issues...

PT-2022-37530 · Opensuse +3 · Containerized-Data-Importer

Name of the Vulnerable Software and Affected Versions: containerized data importer images affected versions not specified Description: The issue is related to security problems that are resolved by rebasing the containers against the current base images. No specific details about the nature of th...

Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload

The plugin does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files such as PHP even when FILEMODS and FILEEDIT are disallowed. PoC 1. Navigate to: Appearance Import Demo Content Theme Demo Importer Manually upload the demo files 2. Use the XML...

Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload

The plugin does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files such as PHP even when FILEMODS and FILEEDIT are disallowed. 1. Navigate to: Appearance Import Demo Content Theme Demo Importer Manually upload the demo files 2. Use the XML file...

CVE-2022-41681

There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker with the role of student to privilege escalate in order to upload a Zip file through the SCORM importer feature. The exploitation of this vulnerability could lead to a remote code injection...