CWE-96

Podatność w Usermin (wersje 0.980 do 1.x przed 1.660) umożliwia uwierzytelnionemu zdalnemu atakującemu wykonanie dowolnego kodu na serwerze. Błąd wynika z użycia dwuargumentowej formy funkcji Perl open() w skrypcie uconfig_save.cgi, co pozwala na wstrzyknięcie poleceń systemowych.

W XWiki Platform, gdy zainstalowana jest aplikacja Extension Repository Application, dowolny zalogowany użytkownik może wykonać na serwerze kod wymagający uprawnień programisty (programming rights). Podatność jest krytyczna, ponieważ umożliwia nieautoryzowane wykonanie kodu po stronie serwera bez konieczności posiadania podwyższonych uprawnień.

Podatność w XWiki Platform umożliwia każdemu zalogowanemu użytkownikowi wykonanie dowolnego kodu zdalnego (RCE) poprzez dodanie instancji klasy `XWiki.WikiMacroClass` do dowolnej strony. Zagrożona jest poufność, integralność i dostępność całej instalacji XWiki.

Podatność klasy Static Code Injection w module Opigno dla Drupal pozwala atakującemu na wstrzyknięcie złośliwego kodu PHP poprzez mechanizm Local File Inclusion. Uzyskanie możliwości wykonania dowolnego kodu po stronie serwera bez uwierzytelnienia czyni tę podatność krytyczną.

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal.

Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability.

Podatność w Tiny MoxieManager PHP przed wersją 4.0.0 umożliwia nieuwierzytelnionym atakującym zdalne wykonanie dowolnego kodu (RCE) poprzez komendę instalatora. Zagrożenie jest krytyczne, ponieważ nie wymaga żadnej autoryzacji i jest dostępne nawet po zakończeniu procesu instalacji.

Podatność w XWiki Platform umożliwia użytkownikowi bez uprawnień Script lub Programming stworzenie URL-a prowadzącego do strony z dowolnym kodem JavaScript. Atak wymaga socjotechniki, jednak jego skutki są krytyczne — możliwe przejęcie kontroli nad sesją ofiary i danymi.

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports (*.prpt) through the JVM script manager. 

less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learning path: from 0.0.0 before 3.1.2.

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno TinCan Question Type: from 7.X-1.0 before 7.X-1.3.

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature. The affected versions are before version 4.13.9, and from version 4.14.0 before 4.18.0.

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before 7.X-1.23.

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver.

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a malicious filename, malicious JavaScript code could be executed. This requires a social engineering attack to get the victim into uploading a file with a malicious name. The malicious code is solely executed during the upload and affects only the user uploading the attachment. While this allows performing actions in the name of that user, it seems unlikely that a user wouldn't notice the malicious filename while uploading the attachment. This has been patched in XWiki 14.10.21, 15.5.5, 15.10.6 and 16.0.0.

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wpt_schema_breadcrumbs shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.