4 matches found
Malicious code in sql-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fcff5d1273cc56a1eb1880fdf45e7c91f06f9e070cbd3d241a4441713c5bbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6272 Malicious code in sql-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fcff5d1273cc56a1eb1880fdf45e7c91f06f9e070cbd3d241a4441713c5bbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2018-18713
The function downsqlaction in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=downsql&name=../ URI...
PT-2018-14591 · Phpyun · Phpyun
Name of the Vulnerable Software and Affected Versions: PHPYun version 4.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal. This is possible through the function down sql action in the file /admin/model/database.class.php. The vulnerability can be...