GCVE - cpe:2.3:a:n/a:openbi:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:openbi:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Openbi (`c161dc13-3763-5c3e-a463-f83abbae81c3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-1198`	vulnerable	2026-06-08 06:25:39.532017	openBI Phar User.php addxinzhi deserialization MEDIUM (6.3) A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252696. Published: 2024-02-02T23:31:04.113Z Updated: 2025-05-07T20:07:25.662Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252696 https://vuldb.com/?ctiid.252696 https://note.zhaoj.in/share/qFXZZfp1NLa3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1117`	vulnerable	2026-06-08 06:25:39.289771	openBI Screen.php index code injection HIGH (7.3) A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252475. Published: 2024-01-31T20:31:04.310Z Updated: 2025-05-29T15:03:18.752Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252475 https://vuldb.com/?ctiid.252475 https://note.zhaoj.in/share/Liu1nbjddxu4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1116`	vulnerable	2026-06-08 06:25:39.289305	openBI Upload.php index unrestricted upload HIGH (7.3) A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252474 is the identifier assigned to this vulnerability. Published: 2024-01-31T20:00:06.237Z Updated: 2024-08-23T19:23:35.469Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252474 https://vuldb.com/?ctiid.252474 https://note.zhaoj.in/share/uCElTQRGWVyw	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1115`	vulnerable	2026-06-08 06:25:39.288624	openBI Setting.php dlfile os command injection HIGH (7.3) A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252473 was assigned to this vulnerability. Published: 2024-01-31T20:00:05.046Z Updated: 2025-05-29T15:03:25.099Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252473 https://vuldb.com/?ctiid.252473 https://note.zhaoj.in/share/81JmiyogcYL7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1114`	vulnerable	2026-06-08 06:25:39.288126	openBI Screen.php dlfile access control MEDIUM (6.5) A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252472. Published: 2024-01-31T19:31:05.018Z Updated: 2024-08-23T19:24:44.201Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252472 https://vuldb.com/?ctiid.252472 https://note.zhaoj.in/share/9wv48TygKRxo	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1113`	vulnerable	2026-06-08 06:25:39.287306	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1036`	vulnerable	2026-06-08 06:25:39.038811	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1035`	vulnerable	2026-06-08 06:25:39.038076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1034`	vulnerable	2026-06-08 06:25:39.035275	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1033`	vulnerable	2026-06-08 06:25:39.034640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1032`	vulnerable	2026-06-08 06:25:39.033408	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.