43 matches found
PT-2021-18003
Name of the Vulnerable Software and Affected Versions: Shibboleth Service Provider versions prior to 3.2.1 Description: The issue allows content injection due to template generation using attacker-controlled parameters. This enables potential attackers to inject malicious content. Recommendations...
LebiShop Mall Backend Template Arbitrary File Write Vulnerability
LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The management background of the mall system provides a generate template or generate a single page in the template function, which can generate the...
CVE-2024-33864
An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in process creation, file inclusion, and PDF document generation via malicious JavaScript...