EUVD-2020-7250

Malware in sbrugna...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

Cross site request forgery (csrf)

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

CVE-2020-15182

CVE-2020-15182 affects the SOY Inquiry component in SOY CMS (versions ≤ 2.0.0.3). The issue combines CSRF with Remote Code Execution, allowing a logged-in administrator to be forced to edit files when visiting a crafted page. Remediation is to upgrade to SOY Inquiry 2.0.0.4 and SOY CMS 3.0.2.328....

CVE-2020-15182: Improper Limitation of a Pathname to a Restricted Directory

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

PT-2020-14253

Name of the Vulnerable Software and Affected Versions SOY Inquiry versions 2.0.0.3 and earlier Description The issue affects the SOY Inquiry component of SOY CMS, allowing remote attackers to force administrators to edit files by loading a specially crafted webpage. This can happen when an...