Summmm

A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. This impacts the function TrigramIndex::open of the file Storage.php. Such manipulation leads to time-of-check time-of-use. The attack needs to be performed locally. Upgrading to version 1.1.4 will fix this issue. The name of the patch is 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3. Upgrading the affected component is recommended. The project maintainer explains: "[T]he attack requires write access to the index directory by a user other than the one running the application. That is a real shared-hosting scenario and worth defending against, which is why it is fixed but it is a hardening measure rather than a remotely reachable vulnerability, and the "Code Execution" impact additionally assumes the symlink target is a web-served .php file."

A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hash hmac of the file pp-content/pp-include/pp-adapter.php of the component pp-token anti-CSRF Handler. Executing a manipulation can lead to hard-coded credentials. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selected ids/ItemID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file admin/upload-image.php of the component Admin Image Upload Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. Upgrading to version 3.7.3 is recommended to address this issue. The name of the patch is 71f5b0de2ecb2bb2934048ed40e1155c107484e3. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function save page of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal. Remote exploitation of the attack is possible. Upgrading to version 3.7.3 is sufficient to fix this issue. The patch is named 71f5b0de2ecb2bb2934048ed40e1155c107484e3. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

An issue exists in the Filter Matching component within the `SearchEngine::matchesSingleFilter()` function located in the `src/SearchEngine.php` file. Manipulation of this function leads to an incorrect comparison, which allows for remote exploitation.

A flaw in the Search Engine component allows remote attackers to perform cross-site scripting (XSS) by manipulating the `Query` argument. The issue resides within the `SearchEngine::buildHighlights()` function located in the `src/SearchEngine.php` file.

An incorrect authorization issue exists in the Settings API Endpoint. A remote attacker can manipulate the `AppSettingController.getAppSettings()` function within the `backend/src/main/java/org/booklore/controller/AppSettingController.java` file. This flaw allows unauthorized access to settings via the `GET /api/v1/settings` endpoint.

An authorization bypass exists in the Download Endpoint component. A remote attacker can manipulate the `bookId` argument within the `streamFileToResponse()` function to bypass security checks.

A remote attack is possible through the Self Update Handler component. The `SelfUpdater::update()` function in the `app/Updater/SelfUpdater.php` file allows the download of code without an integrity check, which could lead to the execution of unauthorized code.

OS command injection is possible via remote attack in the Doctor Command Handler component. The issue exists within the `DoctorCommand::checkSshConnectivity()` and `DoctorCommand::checkRemoteTools()` functions located in the `app/Commands/DoctorCommand.php` file, where improper handling of the `host` argument allows for the execution of arbitrary operating system commands.

An issue exists within the FastAPI component, specifically in the `backend/app/dependencies.py` file. Remote manipulation of an unknown function in this file can lead to missing authentication, allowing unauthorized access.

A remote manipulation of the `ExposeApiAspect.beforeExposeApi()` function within the `ExposeApiAspect.java` file can lead to the exposure of hard-coded credentials.

A remote attack is possible due to the use of a hard-coded cryptographic key within the `encryptKey()` function of the `HostKeyServiceImpl` class. This issue allows for the potential compromise of encrypted data handled by the system.

يوجد ثغرة أمنية في الدالة `MD5Encrypt()` الموجودة في الملف internal/util/crypto/crypto.go. تتعلق هذه المشكلة باستخدام خوارزمية تشفير محفوفة بالمخاطر، مما قد يتيح الاستغلال عن بُعد. وتعتبر درجة تعقيد الهجوم عالية، كما يُعتبر الاستغلال صعبًا.

ثغرة أمنية تسمح للمهاجمين عن بُعد بتنفيذ حقن SQL، وهي تقنية تُستخدم للتدخل في الاستعلامات التي يوجهها التطبيق إلى قاعدة البيانات الخاصة به. توجد المشكلة في الدالة `Transaction::getAll()` داخل الملف `application/models/Transaction.php`. يتم تشغيل الثغرة عن طريق التلاعب بوسائط `orderBy` أو `orderFormat`.

يمكن حقن التعليمات البرمجية عن بُعد من خلال التلاعب بحجة `exec` داخل الدالة `Authenticate()` الموجودة في ملف core/webhook.go.

An OS command injection flaw exists in the Management API component within the `shellExecCommand()` function of the `core/engine.go` file. A remote attacker can exploit this by manipulating the `exec` argument to execute arbitrary operating system commands.