Osclass

8 CVEs across 1 Osclass products. Browse Osclass vulnerabilities, severities, and proof-of-concept exploits.

Osclass products with known CVEs

ProductCVEs
Osclass10
Osclass CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2016-10751High7.22019-05-24osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administra…
CVE-2018-14481Medium6.12019-01-03Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280.
CVE-2014-80852015-01-05Unrestricted file upload vulnerability in the CWebContact::doModel method in oc-includes/osclass/controller/contact.php in OSClass before 3.4.3 allows remote a…
CVE-2014-80842015-01-05Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary l…
CVE-2014-80832015-01-05SQL injection vulnerability in the Search::setJsonAlert method in OSClass before 3.4.3 allows remote attackers to execute arbitrary SQL commands via the alert…
CVE-2014-63082014-10-20Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a render…
CVE-2014-62802014-10-20Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action or…
CVE-2012-51632012-09-26Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via t…
CVE-2012-51622012-09-26Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id pa…
CVE-2012-09732012-09-25Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory parameter to index.ph…