Directory traversal

Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php...

CVE-2020-18438

CVE-2020-18438 is a directory traversal vulnerability in qinggan/phpok 5.1. The flaw allows an attacker to disclose sensitive information by manipulating the title parameter in admin.php. This is documented across multiple connected sources (NVD entry and CNVD/CNNVD variants) confirming the affec...

CVE-2020-18438

Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php...

CVE-2020-18438

Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php...

PT-2021-10940

Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 9.03.50 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code via the polls feature. This is made possible through the poll admin.php file in the...

PT-2021-10169

Name of the Vulnerable Software and Affected Versions: qinggan phpok version 5.1 Description: The issue allows attackers to disclose sensitive information through a directory traversal vulnerability. This is achieved by exploiting the title parameter in the "admin.php" endpoint. Recommendations:...

CVE-2020-18438: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php...

qinggan phpok 路径遍历漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. A directory traversal vulnerability exists in phpok version 5.1. The vulnerability can be exploited to disclose sensitive information via the title parameter of admin.php...

Ibtana - Ecommerce Product Addons < 0.2.4 - Reflected Cross-Site Scripting

The plugin does not escape some user input before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues. v alert/XSS/ v 0.2.4 - https://example.com/wp-admin/admin.php?page=ibtana-custom-post-type&posttypeid="+style=animation-name:rotation+onanimationstart=alert/XSS/...

PT-2021-22531

Name of the Vulnerable Software and Affected Versions: Sassy Social Share WordPress plugin version 3.3.23 Description: The issue arises from PHP Object Injection via the wp ajax heateor sss import config AJAX action, due to the deserialization of unvalidated user-supplied inputs via the import...

CVE-2021-39344: Improper Neutralization of Input During Web Page Generation

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...

CVE-2021-39349: Improper Neutralization of Input During Web Page Generation

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

PT-2021-4509

Name of the Vulnerable Software and Affected Versions KJM Admin Notices versions up to and including 2.0.1 Description The issue is related to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file, allowing attackers with...

CVE-2020-21504

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...

Cross site scripting

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?m=Config&a=add...

Cross site scripting

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...

Cross site scripting

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php/Link/addsave...

CVE-2020-21506

The CVE-2020-21506 entry concerns waimai Super Cms version 20150505 with a cross-site scripting (XSS) vulnerability in the /admin.php?m=Config&a=add component. The root cause described in connected records is improper input handling that allows injected script to run in a victim’s browser. Impact...

CVE-2020-21504

The CVE-2020-21504 entry documents a cross-site scripting (XSS) vulnerability in waimai Super Cms 20150505, originating from the login component at /admin.php?&m=Public&a=login. Exploitation details are not provided in the documents, but multiple sources describe input handling flaws that enable ...

CVE-2020-21504: Improper Neutralization of Input During Web Page Generation

waimai Super Cms 20150505 contains a cross-site scripting XSS vulnerability in the component /admin.php?&m=Public&a=login...