Command Injection

codeigniter4/framework is vulnerable to Command Injection. The vulnerability is due to improper handling of user-controlled filenames and text content when using the ImageMagick imagick handler in the resize or text methods, which allows an attacker to execute arbitrary shell commands by supplyin...

The vulnerability of the resize() and text() methods of the ImageMagick framework, which are used for developing web systems and CodeIgniter applications, allows attackers to load arbitrary files.

The vulnerability of the resize and text methods of the ImageMagick framework used for developing web systems and CodeIgniter applications relates to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote...

PT-2021-30864

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A security issue exists in certain resize operations when using the '--resize-method=box' option. Recommendations At the moment, there is no information about a newer version that contain...

PT-2021-27359

Name of the Vulnerable Software and Affected Versions: gifsicle versions prior to 1.93 Description: The issue is related to a security bug that occurs on certain resize operations with the --resize-method=box option. Additionally, there are problems with colormapless GIFs. Recommendations: Update...

DivX Web Player 1.3.0 - 'npdivx32.dll' Remote Denial of Service

----------------------------------------------------------------------------- DivX Web Player 1.3.0 npdivx32.dll "Resize" method Denial of Service url: http://www.divx.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 all...