Skip to content
OpenAdvisories

Archive

11 February 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Medium 4.7

    EcShop PHP File template.php unrestricted upload

    A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the…

  • High 7.2

    Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write

    A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remo…

  • Medium 6.3

    SourceCodester Canteen Management System removeOrder.php query sql injection

    A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file removeOrder.php. The manipulation of the argument id leads to sql injection. The attack can …

  • Medium 4.0

    Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit

    Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

  • High 7.8

    A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows a…