Skip to content
OpenAdvisories

Package · Packagist

idno/known

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-28507

    Idno: Remote Code Execution via Chained Import File Write and Template Path Traversal

    Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.

    idno idno idno/known Packagist
  • High 8.8
    CVE-2022-33011

    Known vulnerable to account takeover via host header injection attack in v1.3.1

    Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.

    idno/known Packagist