CVE-2024-1198
- EPSS 0.07%
- Veröffentlicht 03.02.2024 00:15:44
- Zuletzt bearbeitet 21.11.2024 08:50:01
A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to des...
CVE-2024-1117
- EPSS 0.08%
- Veröffentlicht 31.01.2024 21:15:08
- Zuletzt bearbeitet 21.11.2024 08:49:50
A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injec...
CVE-2024-1113
- EPSS 0.08%
- Veröffentlicht 31.01.2024 20:15:45
- Zuletzt bearbeitet 21.11.2024 08:49:49
A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadUnity of the file /application/index/controller/Unity.php. The manipulation of the argument file leads to unrestricted upload. It is p...
CVE-2024-1114
- EPSS 0.04%
- Veröffentlicht 31.01.2024 20:15:45
- Zuletzt bearbeitet 21.11.2024 08:49:49
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access co...
CVE-2024-1115
- EPSS 0.48%
- Veröffentlicht 31.01.2024 20:15:45
- Zuletzt bearbeitet 21.11.2024 08:49:49
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The ...
CVE-2024-1116
- EPSS 0.08%
- Veröffentlicht 31.01.2024 20:15:45
- Zuletzt bearbeitet 21.11.2024 08:49:50
A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the at...
CVE-2024-1036
- EPSS 0.1%
- Veröffentlicht 30.01.2024 18:15:47
- Zuletzt bearbeitet 21.11.2024 08:49:39
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. ...