openBI vulnerabilities
We track 11 vulnerabilities in openBI products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on February 3, 2024.
Latest openBI vulnerabilities
- 9.8 Critical severity
openBI: Deserialization of Untrusted Data
A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserializati
- 9.8 Critical severity
openBI: Improper Control of Generation of Code
A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injection. The
- 9.8 Critical severity
openBI: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remot
- 9.8 Critical severity
openBI: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may
- 9.8 Critical severity
openBI: Improper Access Control
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. Th
- 9.8 Critical severity
openBI: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadUnity of the file /application/index/controller/Unity.php. The manipulation of the argument file leads to unrestricted upload. It is possible to
- 9.8 Critical severity
openBI: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. The attack
- 9.8 Critical severity
openBI: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function uploadIcon of the file /application/index/controller/Icon.php. The manipulation of the argument image leads to unrestricted upload. The att
- 9.8 Critical severity
openBI: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadFile of the file /application/index/controller/File.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack re
- 7.5 High severity
openBI: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is the function agent of the file /application/index/controller/Datament.php. The manipulation of the argument api leads to information disclosur
- 9.8 Critical severity
openBI: Deserialization of Untrusted Data
A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads