Cydave

Kanboard هو برنامج لإدارة المشاريع يركز على منهجية Kanban. تعاني الإصدارات السابقة للإصدار 1.2.51 من مشكلة حقن SQL بعد المصادقة. يمكن للمهاجمين الذين لديهم صلاحية إضافة مستخدمين إلى مشروع ما استغلال هذه الثغرة لتفريغ قاعدة بيانات Kanboard بالكامل. تسمح هذه الثغرة بحقن SQL من خلال إضافة مستخدمين إلى مشروع ما. وتعد وظيفة «إضافة مستخدمين» نقطة الاستغلال. وقد تم حل هذه المشكلة في الإصدار 1.2.51.

تم تحديد ثغرة أمنية تتعلق بحقن SQL في إطار عمل Frappe، والتي قد تسمح لمهاجم خبيث بالوصول إلى معلومات حساسة.

The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by authenticated users.

The issue allows unauthenticated attackers to upload arbitrary files, such as PHP files, to the server due to a lack of file validation for uploads. This could potentially lead to server compromise.

The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitized and escaped before being outputted back in the page. This could be exploited against a user with at least Contributor permission.

The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

The issue allows unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege user, such as an admin, visits a page from the plugin. This occurs because the plugin does not properly sanitise and escape some parameters.

The issue arises from improper sanitization and escaping of a parameter in a SQL statement, which is accessible via an AJAX action to unauthenticated users, leading to SQL injection.

The issue concerns a lack of validation for files to be deleted via an AJAX action, which is accessible to unauthenticated users. This could allow attackers to delete arbitrary files on the server using a path traversal attack.

The issue is related to a Reflected Cross-Site Scripting attack, which could be used against logged-in high-privilege users, such as admins. This occurs because the plugin does not properly sanitise and escape a `parameter` before outputting it back in the page. The exploitation of this issue may allow a remote attacker to conduct cross-site scripting attacks.

The issue concerns a Reflected Cross-Site Scripting problem. It arises because a parameter is not properly sanitized and escaped before being outputted back in the page. This could be exploited against both unauthenticated and authenticated users, including those with high privileges like administrators.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a `parameter` is not properly sanitized and escaped before being outputted back in the page. This allows for malicious scripts to be injected and executed.

The issue is related to a Reflected Cross-Site Scripting that can be used against high privilege users such as admin, due to the plugin not sanitising and escaping a parameter before outputting it back in the page.

The issue is related to the Sunshine Photo Cart WordPress plugin, which does not properly sanitise and escape a `parameter` before outputting it back in the page. This leads to a Reflected Cross-Site Scripting (XSS) attack. The exploitation of this issue may allow a remote attacker to conduct an XSS attack.

The issue is related to a Reflected Cross-Site Scripting susceptibility in a vendored dompdf example file included in the PDF Generator for WordPress plugin. This could be exploited against high-privilege users, such as administrators. The vulnerability is associated with the lack of protection measures for the web page structure, potentially allowing a remote attacker to conduct cross-site scripting attacks.

The issue allows unauthenticated users to upload arbitrary files, including malicious PHP code, which could lead to remote code execution (RCE). This is due to a lack of validation for uploaded files.

The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in SQL statements, which are accessible to unauthenticated users. This leads to unauthenticated SQL injection.

The issue is related to a lack of sanitization and escaping of some parameters before using them in SQL statements via an AJAX action. This can lead to SQL injection, potentially allowing a remote attacker to execute arbitrary SQL queries. The vulnerability is exploitable by unauthenticated users.

The issue is related to a SQL injection that can be exploited by unauthenticated users due to improper sanitization and escaping of a parameter in a SQL statement.