Lucene search
+L

3 matches found

NVD
NVD
added 2024/01/31 8:15 p.m.13 views

CVE-2024-1115

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...

9.8CVSS8.2AI score0.0187EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/31 8:15 p.m.27 views

Command injection

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...

7.5CVSS7.8AI score0.0187EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 8:0 p.m.9 views

CVE-2024-1115 openBI Setting.php dlfile os command injection

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...

7.5CVSS7.9AI score0.0187EPSS
SaveExploits0References3
Rows per page
Query Builder