98 matches found
CVE-2023-7210
CVE-2023-7210 affects OneNav up to 0.9.33. The vulnerability is an authentication flaw: manipulation of the X-Token parameter in the API endpoint /index.php?c=api leads to improper authentication. It is exploitable remotely and the exploit has been disclosed publicly (VDB-249765). Several connect...
CVE-2023-7210 OneNav API improper authentication
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...
CVE-2023-7210
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...
CVE-2023-7210 OneNav API improper authentication
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...
OneNav License Issues Vulnerabilities
OneNav is a minimalist navigation/bookmark management system developed using PHP. An authorization issue vulnerability exists in OneNav version 0.9.33 and earlier versions, which stems from the incorrect operation of the parameter X-Token that can lead to incorrect authentication...
CVE-2023-7210: Improper Authentication
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...
PT-2024-3862
Name of the Vulnerable Software and Affected Versions OneNav versions up to 0.9.33 Description A critical issue affects the API component of OneNav, specifically the /index.php?c=api file. The manipulation of the X-Token argument leads to improper authentication, allowing remote attacks. This iss...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
Directory traversal
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
CVE-2022-26276
The CVE-2022-26276 entry affects OneNav v0.9.14, with a vulnerability in the index.php file that enables directory traversal. Multiple connected sources (Red Hat, NVD, CNNVD, OSV, CVE lists, and PT Security) confirm the issue exists in OneNav v0.9.14 and describe the impact as a directory travers...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
OneNav 路径遍历漏洞
OneNav is a minimalist navigation/bookmark management system developed using PHP. A security vulnerability exists in index.php in OneNav v0.9.14. The vulnerability allows attackers to perform directory traversal...
PT-2022-17760 · Onenav · Onenav
Name of the Vulnerable Software and Affected Versions: OneNav version 0.9.14 Description: An issue in the index.php file allows attackers to perform directory traversal. Recommendations: For OneNav version 0.9.14, update to a version that fixes the issue in index.php to prevent directory traversa...
CVE-2022-26276: Improper Limitation of a Pathname to a Restricted Directory
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
in helloxz/onenav
Description During the comparisons of different variables, PHP will automatically convert the data into a common, comparable type. This makes it possible to compare the number 12 to the string '12' or check whether or not a string is empty by using a comparison like $string == True. This, however...