CVE-2018-18626

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database=del" sql parameter because delaction in admin/model/database.class.php mishandles this parameter...

EUVD-2018-10429

Malware in sbrugna...

EUVD-2018-10343

Malware in sbrugna...

EUVD-2024-52655

Malicious code in bioql PyPI...

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

CVE-2024-54724

CVE-2024-54724 affects PHPYun prior to 7.0.2. The documented vulnerability allows code execution through backdoor‑restricted arbitrary file writing and file inclusion. Public sources indicate a high‑severity impact (CVSS v3.1: 9.8, CRITICAL, network access, no privileges required, no user interac...

Command execution vulnerability in phpyun backend (CNVD-2021-37948)

phpyun a talent recruitment system built with PHP and MySQL databases. A command execution vulnerability exists in the backend of phpyun, which can be exploited by attackers to gain control of the server...

Arbitrary Code Execution Vulnerability in phpyun

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun has an arbitrary code execution vulnerability that can be exploited by attackers to gain control of the web server...

PT-2018-14591 · Phpyun · Phpyun

Name of the Vulnerable Software and Affected Versions: PHPYun version 4.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal. This is possible through the function down sql action in the file /admin/model/database.class.php. The vulnerability can be...

phpyun v3.2 (20141222) 前台注入 #5

简要描述： 目测最后一发。 详细说明： 在member/model/blacklist.class.php中 function saveaction ifisarray$POST'buid'&&$POST'buid' $company=$this-obj-DBselectall"company","uid in".@implode',',$POST'buid'."","uid,name";//直接整合成字符串后 带入查询 没有经过自带的pylode处理 或者 intval 和单引号 导致了注入 foreach$company as $val...