Lucene search
+L

7 matches found

Veracode
Veracode
•added 2022/10/14 2:17 a.m.•35 views

Deserialization Of Untrusted Data

melisplatform/melis-front is vulnerable to deserialization of untrusted data. The vulnerability exists in multiple functions because of adding allowedclasses=false param to the unserialize function which allows an attacker to execute of arbitrary PHP code on the system...

9.8CVSS9.4AI score0.01238EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/12 12:00 a.m.•2 views

CVE-2022-39298: Deserialization of Untrusted Data

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of...

9.8CVSS8.2AI score0.01238EPSS
SaveExploits0References2
Mend
Mend
•added 2022/10/12 12:00 a.m.•4 views

CVE-2022-39298

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of "melisplatform/melis-front", and ultimately leads to the execution of...

9.8CVSS0.01238EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/10/12 12:00 a.m.•21 views

Media Links routers 代码问题漏洞

Media Links routers are a series of wireless routers from the Japanese company Media Links. Media Links routers are vulnerable to a code issue that originates from an attacker being able to deserialize arbitrary data from melisplatform/melis-front, ultimately leading to the execution of arbitrary...

9.8CVSS8.8AI score0.01238EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/10/11 8:45 p.m.•34 views

melisplatform/melis-front vulnerable to deserialization of untrusted data

Impact Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-front =...

9.8CVSS9.3AI score0.01238EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/10/11 8:45 p.m.•95 views

GHSA-H479-2MV4-5C26 melisplatform/melis-front vulnerable to deserialization of untrusted data

Impact Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-front =...

7.7CVSS8.8AI score0.01238EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•8 views

PT-2022-24880

Name of the Vulnerable Software and Affected Versions melisplatform/melis-front versions prior to 5.0.1 Description The issue affects MelisFront, the engine that displays websites hosted on Melis Platform, handling tasks such as showing pages, plugins, URL rewriting, search optimization, and SEO...

9.8CVSS0.01238EPSS
SaveExploits0References8
Rows per page
Query Builder