deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30813
Published: 2021-10-28
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. A person with access to a host Mac may be able to bypass the Login Window in Remote Desktop for a locked instance of macOS.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-30814
Published: 2021-10-28
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-30816
Published: 2021-10-28
Description: The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS 15. An attacker with physical access to a device may be able to see private contact information.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212814
CVE: CVE-2021-30817
Published: 2021-10-28
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30818
Published: 2021-10-28
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: http://www.openwall.com/lists/oss-security/2021/12/20/6; https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212814
CVE: CVE-2021-30821
Published: 2021-10-28
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212871; https://support.apple.com/en-us/HT212872
CVE: CVE-2021-30823
Published: 2021-10-28
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2021/12/20/6; https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212815
CVE: CVE-2021-30824
Published: 2021-10-28
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212871; https://support.apple.com/en-us/HT212872
CVE: CVE-2021-30831
Published: 2021-10-28
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-30833
Published: 2021-10-28
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/kb/HT212871; https://support.apple.com/kb/HT212872
CVE: CVE-2021-30834
Published: 2021-10-28
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815
CVE: CVE-2021-30836
Published: 2021-10-28
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/12/20/6; https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212814
CVE: CVE-2021-30840
Published: 2021-10-28
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted dfont file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-36547
Published: 2021-10-28
Description: A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/r0ck3t1973/RCE/issues/1; https://github.com/r0ck3t1973/RCE/issues/1
CVE: CVE-2021-36548
Published: 2021-10-28
Description: A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/monstra-cms/monstra/issues/470; https://github.com/monstra-cms/monstra/issues/470
CVE: CVE-2021-36550
Published: 2021-10-28
Description: TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Create category module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/r0ck3t1973/xss_payload/issues/6; https://github.com/r0ck3t1973/xss_payload/issues/6
CVE: CVE-2021-36551
Published: 2021-10-28
Description: TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/r0ck3t1973/xss_payload/issues/7; https://github.com/r0ck3t1973/xss_payload/issues/7
CVE: CVE-2021-41194
Published: 2021-10-28
Description: FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if `create_users=True` and the username is known or guessed. One may upgrade to version 1.0.0 or apply a patch manually to mitigate the vulnerability. For those who cannot upgrade, there is no complete workaround, but a partial mitigation exists. One can disable user creation with `c.FirstUseAuthenticator.create_users = False`, which will only allow login with fully normalized usernames for already existing users prior to jupyterhub-firstuserauthenticator 1.0.0. If any users have never logged in with their normalized username (i.e. lowercase), they will still be vulnerable until a patch or upgrade occurs.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://github.com/jupyterhub/firstuseauthenticator/pull/38; https://github.com/jupyterhub/firstuseauthenticator/pull/38.patch; https://github.com/jupyterhub/firstuseauthenticator/security/advisories/GHSA-5xvc-vgmp-jgc3
CVE: CVE-2020-23546
Published: 2021-10-28
Description: IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x[PII_REDACTED]000981.
CVSS Score: 7.8 (HIGH)
References: http://irfanview.com; https://github.com/nhiephon/Research/blob/master/README.md; https://www.irfanview.com/plugins.htm
CVE: CVE-2020-23549
Published: 2021-10-28
Description: IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branch Selection starting at FORMATS!GetPlugInInfo+0x[PII_REDACTED]0047f6".
CVSS Score: 7.8 (HIGH)
References: https://github.com/nhiephon/Research/blob/master/README.md; https://www.irfanview.com/plugins.htm; https://github.com/nhiephon/Research/blob/master/README.md
CVE: CVE-2021-25742
Published: 2021-10-29
Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20
References: https://github.com/kubernetes/ingress-nginx/issues/7837; https://groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-22079
Published: 2021-10-29
Description: Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/121.html; https://github.com/1sd3d/Tendown/tree/master/PoCs/Auth/bof11; https://github.com/Lyc-heng/routers/blob/main/routers/stack1.md
CVE: CVE-2021-31624
Published: 2021-10-29
Description: Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the urls parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://tenda.com; https://github.com/Lyc-heng/routers/blob/main/routers/stack2.md; http://tenda.com
CVE: CVE-2021-31627
Published: 2021-10-29
Description: Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://tenda.com; https://github.com/Lyc-heng/routers/blob/main/routers/stack3.md; http://tenda.com
CVE: CVE-2021-31862
Published: 2021-10-29
Description: SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RobertDra/CVE-2021-31862/blob/main/README.md; https://www.sysaid.com/product/on-premise/latest-release; https://github.com/RobertDra/CVE-2021-31862/blob/main/README.md
CVE: CVE-2021-22037
Published: 2021-10-29
Description: Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path Interception by Search Order Hijacking, potentially allowing an attacker to plant a malicious reg.exe command so it takes precedence over the system command. The vulnerability only affects Windows installers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html; https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html
CVE: CVE-2021-22038
Published: 2021-10-29
Description: On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized and does not restrict access to Administrators only so a potential attacker could plant a binary to replace the copied binary right before it gets called, thus gaining Administrator privileges (if the original uninstaller was executed as Administrator). The vulnerability only affects Windows installers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html; https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html
CVE: CVE-2021-3441
Published: 2021-10-29
Description: A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]857-16/hpsbpi03742; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]857-16/hpsbpi03742
CVE: CVE-2021-3662
Published: 2021-10-29
Description: Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.hp.com/us-en/document/ish_4[PII_REDACTED]502-16/hpsbpi03744; https://support.hp.com/us-en/document/ish_4[PII_REDACTED]502-16/hpsbpi03744
CVE: CVE-2021-35237
Published: 2021-10-29
Description: A missing HTTP header (X-Frame-Options) in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a button or link, to another server in which they have an identical webpage. The attacker essentially hijacks the user activity intended for the original server and sends them to the other server. This is an attack on both the user and the server.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kss_9-8_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35237; https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kss_9-8_release_notes.htm
CVE: CVE-2021-39179
Published: 2021-10-29
Description: DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability affects the `/api/trackedEntityInstances` and `/api/trackedEntityInstances/query` API endpoints in all DHIS2 versions 2.34, 2.35, and 2.36. It also affects versions 2.32 and 2.33 which have reached _end of support_ - exceptional security updates have been added to the latest *end of support* builds for these versions. Versions 2.31 and older are unaffected. The system is vulnerable to attack only from users that are logged in to DHIS2, and there is no known way of exploiting the vulnerability without first being logged in as a DHIS2 user. The vulnerability is not exposed to a non-malicious user - the vulnerability requires a conscious attack to be exploited. A successful exploit of this vulnerability could allow the malicious user to read, edit and delete data in the DHIS2 instance. There are no known exploits of the security vulnerabilities addressed by these patch releases. Security patches are available in DHIS2 versions 2.32-EOS, 2.33-EOS, 2.34.7, 2.35.7, and 2.36.4. There is no straightforward known workaround for DHIS2 instances using the Tracker functionality other than upgrading the affected DHIS2 server to one of the patches in which this vulnerability has been fixed. For implementations which do NOT use Tracker functionality, it may be possible to block all network access to POST to the `/api/trackedEntityInstances`, and `/api/trackedEntityInstances/query` endpoints as a temporary workaround while waiting to upgrade.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/dhis2/dhis2-core/commit/16674ac75127b0e83691c6b1c9ce745e67ab58b6; https://github.com/dhis2/dhis2-core/pull/8771; https://github.com/dhis2/dhis2-core/security/advisories/GHSA-cmpc-frjv-rrmw
CVE: CVE-2021-41186
Published: 2021-10-29
Description: Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14 to v1.14.1 suffers from a regular expression denial of service (ReDoS) vulnerability. A broken apache log with a certain pattern of string can spend too much time in a regular expression, resulting in the potential for a DoS attack. This issue is patched in version 1.14.2 There are two workarounds available. Either don't use parser_apache2 for parsing logs (which cannot guarantee generated by Apache), or put patched version of parser_apache2.rb into /etc/fluent/plugin directory (or any other directories specified by the environment variable `FLUENT_PLUGIN` or `--plugin` option of fluentd).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://github.com/fluent/fluentd/blob/master/CHANGELOG.md#v1142; https://github.com/fluent/fluentd/security/advisories/GHSA-hwhf-64mh-r662; https://github.com/github/securitylab-vulnerabilities/blob/52dc4a2a828c6dc24231967c2937ad92038184a9/vendor_reports/GHSL-2021-102-fluent-fluentd.md
CVE: CVE-2021-3756
Published: 2021-10-29
Description: libmysofa is vulnerable to Heap-based Buffer Overflow
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1; https://huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/
CVE: CVE-2021-41674
Published: 2021-10-29
Description: An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the user_email parameter in /admin/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/janikwehrli1/0dayHunt/blob/main/E-Negosyo-System-SQLi.txt; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41674; https://streamable.com/sm0uxf
CVE: CVE-2021-41675
Published: 2021-10-29
Description: A Remote Code Execution (RCE) vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei. .
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/janikwehrli1/0dayHunt/blob/main/E-Negosyo-Authenticated-RCE.py; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41675; https://www.nu11secur1ty.com/2021/11/cve-2021-41675.html
CVE: CVE-2021-41676
Published: 2021-10-29
Description: An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/janikwehrli1/0dayHunt/blob/main/pharmacypossqli.txt; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41676; https://github.com/janikwehrli1/0dayHunt/blob/main/pharmacypossqli.txt
CVE: CVE-2021-41643
Published: 2021-10-29
Description: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Church Management System 1.0 via the image upload field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50306; https://www.exploit-db.com/exploits/50306
CVE: CVE-2021-41644
Published: 2021-10-29
Description: Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50305; https://www.exploit-db.com/exploits/50305
CVE: CVE-2021-41645
Published: 2021-10-29
Description: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50308; https://www.exploit-db.com/exploits/50308
CVE: CVE-2021-41189
Published: 2021-10-29
Description: DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below. This issue is patched in version 7.1. As a workaround, users of 7.0 may temporarily disable the ability for community or collection administrators to manage permissions or workflows settings.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863, CWE-863
References: https://github.com/DSpace/DSpace/commit/277b499a5cd3a4f5eb2370513a1b7e4ec2a6e041; https://github.com/DSpace/DSpace/commit/c3bea16ab911606e15ae96c97a1575e1ffb14f8a; https://github.com/DSpace/DSpace/issues/7928
CVE: CVE-2021-41646
Published: 2021-10-29
Description: Remote Code Execution (RCE) vulnerability exists in Sourcecodester Online Reviewer System 1.0 by uploading a maliciously crafted PHP file that bypasses the image upload filters..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50319; https://www.nu11secur1ty.com/2021/12/cve-2021-41646.html; https://www.exploit-db.com/exploits/50319
CVE: CVE-2021-41746
Published: 2021-10-29
Description: SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php. Attackers can use the vulnerabilities to obtain sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/purple-WL/Yonyou-TurboCRM-SQL-injection/issues/1; https://www.cnvd.org.cn/flaw/show/CNVD-2020-21956; https://github.com/purple-WL/Yonyou-TurboCRM-SQL-injection/issues/1
CVE: CVE-2021-41748
Published: 2021-10-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-41874. Reason: This candidate is a duplicate of CVE-2021-41874. Notes: All CVE users should reference CVE-2021-41874 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-41874
Published: 2021-10-29
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-25872
Published: 2021-10-29
Description: A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/philippe/FrogCMS/issues/34; https://github.com/philippe/FrogCMS/issues/34
CVE: CVE-2020-25873
Published: 2021-10-29
Description: A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/baijiacms/baijiacmsV4/issues/6; https://github.com/baijiacms/baijiacmsV4/issues/6