CVE-2022-38577-Processmaker

Ce dépôt a été archivé et déplacé vers : https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - Élévation de privilèges du profil utilisateur CVE-2022-38577 ProcessMaker, avant la v3.5.4, a été découvert comme contenant des permissions non sécurisées dans la page de profil utilisateur. Cette...

CVE-2024-41453_CVE-2024-41454

CVE-2024-41453 CVE-2024-41454 Vulnérabilités de ProcessMaker à but éducatif uniquement : @ryancooley @velkymx @nolanpro @caleeli installez une instance Docker ProcessMaker 4 Core à partir de ce dépôt : https://github.com/ProcessMaker/pm4core-docker il s'agit de la dernière version docker de PM...

CVE-2021-47978

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

CVE-2021-47978

CVE-2021-47978 : ProcessMaker 3.5.4 contains a Local File Inclusion (LFI) flaw caused by improper path traversal validation. Unauthenticated attackers can access arbitrary files by sending directory traversal sequences, potentially reading sensitive files such as /etc/passwd. The vulnerability is...

CVE-2021-47978

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

EUVD-2021-34839

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

CVE-2021-47978 ProcessMaker 3.5.4 Local File Inclusion via Path Traversal

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

CVE-2021-47978 ProcessMaker 3.5.4 Local File Inclusion via Path Traversal

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

ProcessMaker 安全漏洞

ProcessMaker is a web-based system developed by ProcessMaker Inc. in the PHP language, used for business process management BPM and workflow management. Version 3.5.4 of ProcessMaker contains a security vulnerability. This vulnerability stems from a local file inclusion flaw, which allows...

CVE-2021-47978: Improper Control of Filename for Include/Require Statement in PHP Program

ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send requests with directory traversal sequences to access sensitive system files like /etc/passwd without...

PT-2026-41464

Name of the Vulnerable Software and Affected Versions ProcessMaker version 3.5.4 Description Improper path traversal validation allows unauthenticated attackers to read arbitrary files. By sending requests containing directory traversal sequences, an attacker can access sensitive system files, su...

EUVD-2016-9866

Malware in sbrugna...

EUVD-2020-5772

Malware in sbrugna...

EUVD-2016-9869

Malware in sbrugna...

EUVD-2013-7254

Malware in sbrugna...

EUVD-2020-5773

Malware in sbrugna...

EUVD-2025-21034

Malicious code in bioql PyPI...

CVE-2013-10035

A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPageAjax.php, and casesSchedulerGetPlugins.php, by supplying...

CVE-2013-10035

A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPageAjax.php, and casesSchedulerGetPlugins.php, by supplying...

CVE-2013-10035 ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution

A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPageAjax.php, and casesSchedulerGetPlugins.php, by supplying...