EUVD-2018-3081

Malware in sbrugna...

EUVD-2018-3080

Malware in sbrugna...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwdmethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

Sql injection

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

Cross site request forgery (csrf)

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4–1.0.8 contains a SQL Injection vulnerability in the search() function of application/home/controller/project.php. All sources consistently describe an input-driven SQL injection in the project search path, enabling arbitrary SQL execution via malicious input. The affected component i...

PHPRAP SQL Injection Vulnerability

PHPRAP is a PHP-based lightweight open source document management system . A SQL injection vulnerability exists in PHPRAP versions 1.0.4 through 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'search' function in the...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

CVE-2018-11032

PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search function...

CVE-2018-11031

PHPRAP 1.0.4–1.0.8 is affected by a server-side request forgery (SSRF) in the file application/home/controller/debug.php, exploitable via the /debug URI. The issue is triggered by crafted input such as api[url]=file:////etc/passwd and api[method]=get in a POST request, enabling an attacker to ind...

PHPRAP Server-Side Request Forgery Vulnerability

PHPRAP is a PHP lightweight open source API interface document management system . A server-side request forgery vulnerability exists in the application/home/controller/debug.php file in PHPRAP versions 1.0.4 through 1.0.8. This vulnerability can be exploited to perform server-side request forger...