joomla-menu-items-api

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · joomla-menu-items-api Write-up: https://abraxaslabs.tech/research/joomla-menu-items-api joomla-menu-items-api Class: Privilege leftover Reach: Remote Joomla CMS 6.1.3 0f2d4de - Open Source Matters The administrator UI...

CVE-2019-25778

Versions of SeaCMS through 8.7 are vulnerable to an unauthenticated SQL injection vulnerability. The flaw exists in the rlist[] array parameter , which allows remote attackers to manipulate database queries. By sending crafted GET requests to /comment/api/index.php using backtick-quoted variables...

CVE-2019-25778 SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter

SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist array parameter. Attackers can send GET requests to /comment/api/index.php with crafted rlist values using backtick-quoted...

EUVD-2019-20209

SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist array parameter. Attackers can send GET requests to /comment/api/index.php with crafted rlist values using backtick-quoted...

SeaCMS SQL injection vulnerability

SeaCMS versions 8.7 and earlier contain an SQL injection vulnerability. This vulnerability stems from unauthenticated SQL injection; attackers can inject SQL code via the rlist array parameter in /comment/api/index.php, then use error messages to extract database information...

CVE-2026-81729: Incorrect Authorization

Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents::delete in htdocs/api/class/apidocuments.class.php calls dolchecksecureaccessdocument with the mode argument 'read' when handling DELETE /api/index.php/documents, while the sibling builddoc path...

CVE-2026-35676

phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwords without token validation. Attackers can enumerate valid username and email pairs and force immediate password changes by sendin...

CVE-2022-37191

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...

CVE-2022-37190

CuppaCMS 1.0 is vulnerable to Remote Code Execution RCE. An authenticated user can control both parameters action and function from "/api/index.php...

CVE-2022-37190

CuppaCMS 1.0 is vulnerable to Remote Code Execution RCE. An authenticated user can control both parameters action and function from "/api/index.php...

CVE-2022-37191: Inclusion of Functionality from Untrusted Control Sphere

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...

CVE-2020-11671

Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default...

CVE-2020-11671: Missing Authorization

Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default...

PT-2020-12761

Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.27.36 and earlier Description The issue is related to a lack of authorization controls in REST API functions. This allows any TeamPass user with a valid API token to become a TeamPass administrator and read or modify all...

CVE-2019-11618: Initialization of a Resource with an Insecure Default

doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 accesstoken in a uri=blog&action=index&controller=blog...

PT-2019-12425

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote attacker to gain administrator privileges for creating and modifying articles. This can be achieved by exploiting a default administrator credential vulnerability, potentially using an...