A security flaw has been identified in MariaDB, a popular open-source database platform used by many websites. The issue only impacts specific MariaDB versions running on Windows servers that have the CONNECT engine installed and REST support enabled: versions 10.6.1 to just before 10.6.26, 10.11.1 to just before 10.11.17, 11.4.1 to just before ...
Continue reading
MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As ...
Continue reading
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attackers can chain arbitrary SQL execution to alter the ...
Continue reading
A security vulnerability has been identified in specific versions of PHP, the programming language that powers most dynamic, interactive websites. The flaw exists in the bccomp() function, a tool used to compare very large numbers. If this function processes input submitted directly by website visitors (rather than pre-vetted, trusted data), ...
Continue reading
