Joplin 代码注入漏洞

Joplin is an open source note-taking and to-do list application by Laurent Cozic individual developer. A code injection vulnerability exists in Joplin versions prior to 3.0.3, which stems from the fact that an attacker can abuse the fact that the open external is used without any URI scheme...

PT-2023-21723 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.0.3 Discourse versions prior to 3.1.0.beta4 Description: Discourse is an open source platform for community discussion. A maliciously crafted request from a Discourse administrator can lead to a long-running...

CVE-2010-5106

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role...