Dun

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, can be triggered by an app to cause unexpected system termination.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the module.php file when magic quotes gpc is disabled. This can be achieved by using directory traversal sequences in the `pgvaction` parameter.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `section` parameter in the include/get read.php file.

A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `name` parameter.

The issue allows remote attackers to execute arbitrary code via shell metacharacters in the `var filename` parameter in a (1) tif or (2) pdf format action.

The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in the `id` parameter to "comm.php" or the `var filename` parameter to "viewrq.php".

The issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in ejemplo/paises.php.

A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the `default language` parameter of the "login.php" file.

Name of the Vulnerable Software and Affected Versions: Sofi WebGui versions 0.6.3 PRE and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mod dir` parameter in the hu/modules/reg-new/modstart.php module. Recommendations: For Sofi WebGui versions 0.6.3 PRE and earlier, as a temporary workaround, consider restricting access to the hu/modules/reg-new/modstart.php module until a patch is available. Avoid using the `mod dir` parameter in the affected module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ol'bookmarks manager versions 0.7.5 and earlier Description: The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `show` parameter of the show.php file, enabling directory traversal. Recommendations: For versions 0.7.5 and earlier, consider restricting access to the show.php file until a patch is available. As a temporary workaround, avoid using the `show` parameter in the show.php file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: OpenRat versions 0.8-beta4 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `tpl dir` parameter in the themes/default/include/html/insert.inc.php file. Recommendations: For OpenRat versions 0.8-beta4 and earlier, as a temporary workaround, consider restricting access to the `insert.inc.php` file until a patch is available. Avoid using the `tpl dir` parameter in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cyberfolio versions 7.12.2 and earlier Description: The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `theme` parameter of the portfolio/css.php file. This enables attackers to potentially access and execute sensitive files on the server. Recommendations: For Cyberfolio versions 7.12.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Way Of The Warrior (WOTW) versions 5.0 and earlier Description: The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `plancia` parameter in the "visualizza.php" file. Recommendations: For versions 5.0 and earlier, consider restricting access to the `visualizza.php` file until a patch is available. As a temporary workaround, avoid using the `plancia` parameter in the affected file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Way Of The Warrior (WOTW) versions 5.0 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `plancia` parameter to "crea.php". Recommendations: For versions 5.0 and earlier, consider disabling access to the "crea.php" endpoint until a patch is available. Restrict the use of the `plancia` parameter to minimize the risk of exploitation.

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mj config[src path]` parameter in the main.inc.php file.

A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `obj` parameter of the scr/form.php file.

A directory traversal issue exists when the `magic quotes gpc` setting is disabled, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a `..` (dot dot) sequence in the `l` parameter.

The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `sitecode` parameter to the "connect/index.php" endpoint.

The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the `doc` parameter of the docs.php file, enabling directory traversal.

The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `code` parameter of the image.php file. This enables directory traversal, potentially leading to the execution of malicious code.