CVE-2020-19113

Arbitrary File Upload vulnerability in Online Book Store v1.0 in adminadd.php, which may lead to remote code execution...

CVE-2020-19113

CVE-2020-19113 affects the PHP-based Online Book Store v1.0, specifically the file admin_add.php. The vulnerability is an arbitrary file upload that can lead to remote code execution . The issue is documented across multiple sources (e.g., NVD, CNVD, Red Hat, CVE.org) with the same description, i...

CVE-2020-19112

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admindelete.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19112

CVE-2020-19112 affects Online Book Store v1.0. A SQL injection via the bookisbn parameter to admin_delete.php could allow a remote attacker to execute arbitrary code. Sources (NVD, RH, PRION, CNNVD, CVE lists) confirm the same description; exploitation status and remediation details are not provi...

CVE-2020-19111

CVE-2020-19111 concerns an Incorrect Access Control vulnerability in Online Book Store v1.0, exploitable via admin_verify.php. The root cause is bypassing authentication, allowing a remote attacker to obtain sensitive information. Affected software is the Online Book Store (version 1.0); the issu...

CVE-2020-19111

Incorrect Access Control vulnerability in Online Book Store v1.0 via adminverify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information...

CVE-2020-19110

The CVE-2020-19110 entry describes an SQL Injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter of book.php. This could allow a remote attacker to execute arbitrary code. The connected documents reiterate the same description but do not provide additional techn...

CVE-2020-19110

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code...

CVE-2020-19109

CVE-2020-19109 describes an SQL injection vulnerability in Online Book Store v1.0, exploitable via the bookisbn parameter to admin_edit.php. The vulnerability could allow a remote attacker to execute arbitrary code, as indicated by the description and impact notes. Affected component/file: admin_...

CVE-2020-19109

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to adminedit.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19108

The CVE-2020-19108 entry describes a SQL injection in Online Book Store v1.0 exploitable via the pubid parameter to bookPerPub.php, enabling remote code execution as per the documented description. Affected software: Online Book Store v1.0; vulnerability: improper handling of pubid leading to arb...

CVE-2020-19108

SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19107

SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19107

CVE-2020-19107 describes an SQL injection in Online Book Store v1.0, exploitable via the isbn parameter to edit_book.php, which could allow a remote attacker to execute arbitrary code. The initial documents consistently identify the vulnerable component as the Online Book Store (v1.0) and the att...

CVE-2021-29478

Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly...

CVE-2021-29478

Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly...

PT-2021-6721 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: A code execution vulnerability exists in the Nef polygon-parsing functionality. An out-of-bounds read vulnerability is present in the SNC io parser::read sface function, specifically in the store sm...

Moderate: Red Hat Security Advisory: etcd security update

An update for etcd is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

kernel: SCSI target (LIO) write to any block on ILO backstore

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

A week in security (April 19 – 25)

Last week on Malwarebytes Labs, we interviewed Youssef Sammouda, a 21-year-old bug bounty hunter who is focused on finding vulnerabilities on Facebook. We looked into the CodeCov supply-chain attack, the vulnerabilities in Pulse Secure VPN that are being actively exploited by attackers, and the...