Lucene search
K

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:10 p.m.3 views

Malicious code in sql-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fcff5d1273cc56a1eb1880fdf45e7c91f06f9e070cbd3d241a4441713c5bbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:10 p.m.6 views

MAL-2022-6272 Malicious code in sql-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fcff5d1273cc56a1eb1880fdf45e7c91f06f9e070cbd3d241a4441713c5bbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2018/10/29 12:29 p.m.2 views

CVE-2018-18713

The function downsqlaction in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=downsql&name=../ URI...

7.5CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2018/10/27 12:0 a.m.4 views

PT-2018-14591 · Phpyun · Phpyun

Name of the Vulnerable Software and Affected Versions: PHPYun version 4.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal. This is possible through the function down sql action in the file /admin/model/database.class.php. The vulnerability can be...

7.5CVSS7.4AI score0.02304EPSS
Exploits0References3
Rows per page
Query Builder