TI-2025-08010 CVE-2025-8756 · GHSA-q9px-vqp3-xmr5
TDuckCloud tduck-platform manage preHandle improper authorization
Priority MEDIUM 57
A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical.
Vulnerabilities
5 records
TI-2025-07212 CVE-2025-7888 · GHSA-p65m-fhpg-ph97
TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection
Priority MEDIUM 57
A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical.
TI-2025-00462 CVE-2025-0558 · GHSA-98r8-pp4j-5cqj
TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection
Priority MEDIUM 57
A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0.
TI-2023-28429 CVE-2023-51805 · GHSA-x7pr-w7j8-77wg
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker…
Priority HIGH 68
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.
TI-2023-19246 CVE-2023-37733 · GHSA-9hv6-r74p-93h4
An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute…
Priority MEDIUM 60
An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file.