34 matches found
PT-2023-22373 · Sofawiki · Sofawiki
Name of the Vulnerable Software and Affected Versions: SofaWiki versions prior to 3.8.9 Description: The issue is related to a file upload vulnerability that can lead to command execution. Recommendations: For versions prior to 3.8.9, update to version 3.8.9 or later to resolve the issue...
CVE-2023-29721: Unrestricted Upload of File with Dangerous Type
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
CVE-2023-29721
CVE-2023-29721 affects SofaWiki versions up to 3.8.9. A file-upload vulnerability allows command execution, per multiple connected records (e.g., Red Hat, NVD, CNNVD). The CVSS indicates critical impact with network attack vector and no user interaction required. Remediation guidance found in PT-...
CVE-2023-29721
SofaWiki = 3.8.9 has a file upload vulnerability that leads to command execution...
SofaWiki Cross-Site Scripting Vulnerability
SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
Cross site scripting
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-29720
SofaWiki
SofaWiki cross-site scripting vulnerabilities
SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-29720
SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...
