Mayoterry

Name of the Vulnerable Software and Affected Versions: oria gridx version 1.3 Description: A remote code execution issue exists, allowing remote attackers to execute arbitrary code via a crafted value to the `query` parameter in tests/support/stores/test grid filter.php. Recommendations: For oria gridx version 1.3, as a temporary workaround, consider restricting access to the `test grid filter.php` file until a patch is available. Avoid using the `query` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a vulnerability in the Oracle WebLogic Server product, specifically in the Console component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle WebLogic Server, potentially resulting in a takeover. The vulnerability is easily exploitable and can impact the confidentiality, integrity, and availability of the server. It is associated with errors in code generation management and can be exploited using HTTP requests.