Davood_Cracker

Name of the Vulnerable Software and Affected Versions: Vladimir Menshakov buratinable templator (aka bubla) version 0.9.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `bu dir` parameter to specific PHP files, including (1) 'bu/bu claro.php', (2) 'bu/bu cache.php', or (3) 'bu/bu parse.php'. Recommendations: For version 0.9.1, consider restricting access to the `bu dir` parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the `bu dir` parameter in the 'bu/bu claro.php', 'bu/bu cache.php', and 'bu/bu parse.php' files to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Vladimir Menshakov buratinable templator (aka bubla) version 1.0.0rc2 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the `bu dir` or `bu config[dir]` parameter in the process.php file. This can be exploited by providing a malicious URL as the value for these parameters. Recommendations: For versions 1.0.0rc2 and earlier, as a temporary workaround, consider restricting access to the process.php file or disabling the `bu dir` and `bu config[dir]` parameters until a patch is available. Avoid using the `bu dir` and `bu config[dir]` parameters in the process.php file until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Barman version 0.0.1r3 **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `basepath` parameter in the interface.php file. **Recommendations** For Barman version 0.0.1r3, consider restricting access to the interface.php file until a patch is available. As a temporary workaround, avoid using the `basepath` parameter in the affected interface.php file to minimize the risk of exploitation.