10 matches found
CVE-2023-24323
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
CVE-2023-24323
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
Xxe
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
CVE-2023-24323
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
CVE-2023-24323
Summary (CVE-2023-24323): Mojoportal v2.7 is affected by an authenticated XML External Entity (XXE) injection vulnerability. The issue affects the Mojoportal web application (version 2.7) and involves an XXE in the XML processing path. According to the CVE records, the CVSS v3.1 base score is 8.8...
CVE-2023-24323
Mojoportal v2.7 was discovered to contain an authenticated XML external entity XXE injection vulnerability...
CVE-2022-40341
mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...
Privilege escalation
mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...