CVE Vulnerability Catalog

Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the gid parameter in admin/index.php?mode=user&page=groups&action=edit.

Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the cid parameter in admin/index.php?mode=settings&page=projects&action=edit.

There is a file upload vulnerability in ujcms version 6.0.2 via the endpoint /api/backend/core/web-file-upload/upload.

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo versions 1.11.* up to 1.11.18 allows attackers to upload crafted SVG files. This can lead to arbitrary code execution on the server.

There is a code injection vulnerability in the GitHub repository nuxt/nuxt prior to version 3.5.3.

PyBB is an open source bulletin board that was vulnerable to SQL Injection prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. This issue has been fixed in the mentioned commit.

The CKEditor v1.2.3 plugin for Redmine has an unrestricted file upload vulnerability in the 'Browse and upload images' feature, allowing arbitrary files to be uploaded to the server.

CVE-2023-35064 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection through SOAP parameter tampering in Satos Mobile.

The vulnerability in TMT Lockcell relies on cookies without validation and integrity checking, allowing privilege abuse and authentication bypass.

CVE-2023-3049 vulnerability in TMT Lockcell allows unrestricted upload of files with dangerous types, leading to command injection.

The vulnerability in TMT Lockcell allows authorization bypass through a user-controlled key, leading to authentication abuse and the ability to bypass authentication.

CVE-2023-3047 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in TMT Lockcell.

Wtyczka WP Directory Kit dla WordPressa jest podatna na atak Local File Inclusion w wersjach do 1.1.9 włącznie, poprzez funkcję 'wdk_public_action'. Umożliwia to nieautoryzowanym atakującym dołączanie i wykonywanie dowolnych plików na serwerze, co pozwala na wykonanie kodu PHP w tych plikach.

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.

A command injection vulnerability was discovered in D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 via the ST parameter in the lxmldbc_system() function.

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request.

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2.

SQL injection vulnerabilities have been found in the MOVEit Transfer web application before versions 2021.0.7, 2021.1.5, 2022.0.5, 2022.1.6, and 2023.0.2. An unauthenticated attacker could gain unauthorized access to MOVEit Transfer's database.

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users.

A buffer overflow was discovered in Progress DataDirect Connect for ODBC before version 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer allocated to process the string value.