PT-2023-25710

Name of the Vulnerable Software and Affected Versions Knowage versions 6.x.x through 8.1.7 Description The issue affects the Knowage suite, allowing authenticated users to exploit the templateName parameter in the /knowage/restful-services/dossier/importTemplateFile endpoint to download any file...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::TemplateName::getKind

Detailed Report: https://oss-fuzz.com/testcase?key=6249243525906432 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::TemplateName::getKind...

CVE-2018-20420

In webERP 4.15, ZCreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter...

CVE-2005-3823

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function...

CVE-2005-3823

CVE-2005-3823 affects vTiger CRM 4.2 and earlier. The Users module allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to eval. The connected sources provide no explicit remediation details; update/patch information is not inc...

CVE-2005-3823: Undefined Security Weakness

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function...