1606 matches found
CVE-2009-4623
CVE-2009-4623 CVE-2009-4623 पर दूरस्थ शेल: एक गैर-इंटरैक्टिव शेल प्राप्त करें, उन्नत उपयोग के लिए दूसरा शेल खोलें !!! उपयोग: CVE-2009-4623.sh hostnameandPath उदाहरण: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php विकल्प: -h यह बकवास...
CVE-2022-27413
Hospital-Management-System v1.0 - SQLi 공급업체 설명: 취약점 페이지는 admin.php입니다. http://you ip/HMS/admin.php Hospital-Management-System v1.0 admin.php 페이지의 adminname 매개변수는 SQL 인젝션 공격에 취약한 것으로 보입니다...
CVE-2025-57310
CVE-2025-57310 Una vulnerabilità di Cross-Site Request Forgery CSRF in Salmen2/Simple-Faucet-Script v1.07 tramite una richiesta POST appositamente predisposta a admin.php?p=ads&c=1 che consente a un attaccante di eseguire codice arbitrario. CWE CWE-352: Cross-Site Request Forgery CSRF Punteggio...
CVE-2024-39248
Titolo Exploit: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Autore Exploit: Jason Jacobs 0xjasonjacobs - Twitter Homepage del fornitore: https://sourceforge.net/projects/simpcms/ Endpoint vulnerabile: /SimpCMS/admin.php Una vulnerabilità di cross-site scripting XSS in SimpCMS v0.1...
CVE-2020-25273
CVE-2020-25273 Online Bus Booking System 1.0 presenta un bypass dell'autenticazione nella schermata di login Admin in admin.php tramite injection SQL su username o password. Fornitore - SourceCodester Prodotto...
CVE-2026-63302
Quick.CMS is vulnerable to Local File Inclusion LFI in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application's directory structure via a crafted HTTP request. Successful exploitation allows disclosure...
CVE-2016-20070
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
EUVD-2019-20182
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...
PT-2026-49225
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicate quote invoice an...
CVE-2026-11480
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. I...
CVE-2026-9609
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
EUVD-2026-32029
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
CVE-2026-9609 QianFox FoxCMS Admin.php edit password recovery
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
CVE-2026-8626
CVE-2026-8626 concerns the SponsorMe WordPress plugin, vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter in all versions up to 0.5.2. The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts int...
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers can modify the download parameter in admin.php requests with directory traversal sequences to access...
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers can modify the download parameter in admin.php requests with directory traversal sequences to access...
PT-2026-41446
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers can modify the download parameter in admin.php requests with directory traversal sequences to access...
CVE-2020-37217 Easy2Pilot 7 Cross-Site Request Forgery via admin.php
Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into visiting malicious pages. Attackers can craft HTML forms targeting the admin.php?action=adduser endpoint with POST requests...
CVE-2026-7746 SourceCodester Web-based Pharmacy Product Management System edit-admin.php sql injection
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /productexpiry/edit-admin.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is...