https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:39:07 +0000 https://vulnerability.circl.lu/vuln/cve-2018-1000628 <p>Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP&#39;s GET global variable array using PHP&#39;s strcmp() function. By adding &#34;[]&#34; to the end of &#34;key&#34; in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions.</p> <p>Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP&#39;s GET global variable array using PHP&#39;s strcmp() function. By adding &#34;[]&#34; to the end of &#34;key&#34; in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions.</p> https://vulnerability.circl.lu/vuln/cve-2018-1000628