Osclass Security Advisory 3.4.1 - Local File Inclusion

A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. id: CVE-2014-6308 info: name: Osclass Security Advisory 3.4.1 - Local File Inclusion author: daffainfo...

CVE-2026-113381

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

CVE-2026-113381

A SQL injection vulnerability exists in Osclass up to version 8.3.1 . The flaw is located within the Item Model Handler component, specifically in the Item::findUserItems function of the file oc-includes/osclass/model/Item.php. The root cause is the improper handling of the sPattern argument, whi...

CVE-2026-113381 Osclass Item Model Item.php findUserItems sql injection

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

EUVD-2026-104877

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

PT-2026-118314

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection. The attack may be initiate...

Osclass Security Advisory 3.4.1 - Local File Inclusion Detection

A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in OSClass before 3."""...

📄 glFusion 1.3.0 Blind SQL Injection

A critical blind SQL Injection vulnerability exists in glFusion CMS version 1.3.0, affecting the Media Gallery search functionality. The vulnerability allows unauthenticated remote attackers to execute arbitrary SQL commands and potentially compromise the entire database. This is older research...

EUVD-2012-5085

Malware in sbrugna...

EUVD-2014-7934

Malware in sbrugna...

EUVD-2016-1745

Malware in sbrugna...

EUVD-2012-5086

Malware in sbrugna...

EUVD-2018-6398

Malware in sbrugna...

EUVD-2014-7932

Malware in sbrugna...

EUVD-2012-0996

Malware in sbrugna...

EUVD-2014-6165

Malware in sbrugna...

EUVD-2014-7933

Malware in sbrugna...

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

CVE-2012-0973

Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.php, which is not properly handled by the 1 oscsearchcategoryid function in oc-includes/osclass/helpers/hSearch.php and 2 findBySlug functio...

CVE-2016-10751

osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax=ajaxupload...