56 matches found
CVE-2019-11376
SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a...
EUVD-2020-7252
Malware in sbrugna...
EUVD-2017-11347
Malware in sbrugna...
EUVD-2014-2050
Malware in sbrugna...
EUVD-2024-25311
Malicious code in bioql PyPI...
CVE-2020-15188
SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution RCE. The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed...
CVE-2020-15182
The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...
CVE-2024-28187
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
CVE-2024-28187
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
Command injection
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
CVE-2024-28187
SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection via the file upload feature when accessed by an administrator, allowing arbitrary OS commands through specially crafted filenames containing a semicolon (jpegoptim functionality). The vulnerability is patched in version 3....
CVE-2024-28187 OS Command Injection Vulnerability in SOY CMS
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
CVE-2024-28187 OS Command Injection Vulnerability in SOY CMS
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
CVE-2024-28187 OS Command Injection Vulnerability in SOY CMS
SOY CMS is an open source CMS content management system that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrator. The vulnerability enables the executi...
SOY CMS Security Vulnerability
SOY CMS is a content management system CMS. A security vulnerability exists in SOY CMS versions prior to 3.14.2 that originates from allowing arbitrary operating system commands to be executed via specially crafted filenames containing semicolons, which can affect jpegoptim functionality...
CVE-2020-15189
SOY CMS 3.0.2 and earlier is affected by Remote Code Execution RCE using Unrestricted File Upload. Cross-Site ScriptingXSS vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused...
CVE-2020-15189
SOY CMS 3.0.2 and earlier is affected by Remote Code Execution RCE using Unrestricted File Upload. Cross-Site ScriptingXSS vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused...
Unrestricted file upload
SOY CMS 3.0.2 and earlier is affected by Remote Code Execution RCE using Unrestricted File Upload. Cross-Site ScriptingXSS vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused...
CVE-2020-15189
SOY CMS
CVE-2020-15189 Remote Code Execution in SOY CMS
SOY CMS 3.0.2 and earlier is affected by Remote Code Execution RCE using Unrestricted File Upload. Cross-Site ScriptingXSS vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused...