Skip to content
OpenAdvisories

Archive

26 August 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4548 Public exploit EPSS 29%

    SPA-Cart eCommerce CMS GET Parameter search sql injection

    A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Parameter Handler. Such manipulation of the argument filter[brandid] leads to sql injection. The attack may …

  • Medium 6.3

    IBOS OA export&checkids=x sql injection

    A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The explo…

  • Medium 4.3

    Byzoro Smart S85F Management Platform php.ini direct request

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated …