EUVD-2018-3080

Malware in sbrugna...

EUVD-2018-3081

Malware in sbrugna...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwdmethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

Cross site request forgery (csrf)

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

Sql injection

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11032

PHPRAP 1.0.4–1.0.8 contains a SQL Injection vulnerability in the search() function of application/home/controller/project.php. All sources consistently describe an input-driven SQL injection in the project search path, enabling arbitrary SQL execution via malicious input. The affected component i...

PT-2018-10254

Name of the Vulnerable Software and Affected Versions PHPRAP versions 1.0.4 through 1.0.8 Description The issue is related to SQL Injection, which occurs via the search function in the application/home/controller/project.php file. Recommendations For PHPRAP versions 1.0.4 through 1.0.8, consider...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032: Improper Neutralization of Special Elements used in an SQL Command

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11031: Server-Side Request Forgery (SSRF)

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11031

PHPRAP 1.0.4–1.0.8 is affected by a server-side request forgery (SSRF) in the file application/home/controller/debug.php, exploitable via the /debug URI. The issue is triggered by crafted input such as api[url]=file:////etc/passwd and api[method]=get in a POST request, enabling an attacker to ind...

PHPRAP SQL Injection Vulnerability

PHPRAP is a PHP-based lightweight open source document management system . A SQL injection vulnerability exists in PHPRAP versions 1.0.4 through 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'search' function in the...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

PHPRAP Server-Side Request Forgery Vulnerability

PHPRAP is a PHP lightweight open source API interface document management system . A server-side request forgery vulnerability exists in the application/home/controller/debug.php file in PHPRAP versions 1.0.4 through 1.0.8. This vulnerability can be exploited to perform server-side request forger...

PT-2018-10253

Name of the Vulnerable Software and Affected Versions PHPRAP versions 1.0.4 through 1.0.8 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It can be exploited via the /debug URI by sending a POST request with specific parameters, such as apiurl=file:////etc/passwd...