CVE-2023-37650

A Cross-Site Request Forgery CSRF in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands...

CVE-2022-29747: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice&id= // Leak place --- id...

CVE-2022-29980: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manageuser&id=...

CVE-2022-29983: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/viewinvoice&id=...

CVE-2022-29984: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...

CVE-2014-8597

A reflected cross-site scripting XSS vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel...

CVE-2014-8597: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel...

SQL injection vulnerability in cms_admin_edit.php file of VANOC enterprise website management system (PHP version)

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. An SQL injection vulnerability exists in the cmsadminedit.php file of the Vanno Enterprise Website Management System PHP Edition. An attacker can exploit the vulnerabilit...

Coat of arms of cms any admin add exploit

No description provided by source...

CVE-2017-6918

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...

WDS CMS - SQL Injection

In The Name Of ALLAH Exploit Title : WDS CMS - SQL Injection Google Dork : allinurl:wdsnews/article.php?ID= Date : 2015-08-09 Exploit Author : Ismail Marzouk Vendor Homepage : http://webdesignskolan.se/ Tested on : Windows 7 Exploit : http://...

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be...