Code injection in codiad

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-19208 · ADVISORY
• Codiad/Codiad · PACKAGE
• Codiad/Codiad · WEB
• Hacker5preme/Exploits · WEB
• herolab.usd.de/en/security-advisories · WEB
• herolab.usd.de/security-advisories/usd-2019-0049 · WEB
• exploit-db.com/exploits/49902 · WEB
• packetstormsecurity.com/files/162753/Codiad-2.8.4-Remote-Code-Execution.html · WEB
• herolab.usd.de/en/security-advisories · Third Party Advisory
• herolab.usd.de/security-advisories/usd-2019-0049 · Exploit

Weitere Schwachstellen in codiad/codiad

• CVE-2017-20178HOCH 7.5** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the f…
• CVE-2020-23355HOCH 7.5** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentica…
• CVE-2020-14042MITTEL 6.1** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability…
• CVE-2020-14044HOCH 7.2** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user wi…
• CVE-2020-14043HOCH 8.8** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The reques…