PT-2019-8565

Name of the Vulnerable Software and Affected Versions Apache Solr versions 1.3 through 7.6 Description The issue allows a remote attacker with access to the server to make Apache Solr perform an HTTP GET request to any reachable URL, due to the lack of a whitelist mechanism for the shards...

CVE-2017-3164: Server-Side Request Forgery (SSRF)

Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 inclusive. Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL...

Shards of Magic - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shards of Magic published at the 'play' market has multiple vulnerabilities...

CVE-2006-3065

CVE-2006-3065 is a SQL injection vulnerability in blur6ex 0.3.462 affecting engine/shards/blog.php. The flaw allows remote attackers to inject arbitrary SQL via the ID parameter in a proc_reply action on the blog shard. The description notes similarity to CVE-2006-1763 but cites different affecte...

CVE-2006-3065: Undefined Security Weakness

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a procreply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different...