Lucene search
+L

378 matches found

Vulnrichment
Vulnrichment
•added 2024/09/27 1:00 p.m.•14 views

CVE-2024-9282 bg5sbk MiniCMS page-edit.php cross-site request forgery

A vulnerability was found in bg5sbk MiniCMS 1.11. It has been classified as problematic. Affected is an unknown function of the file page-edit.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

6.9CVSS6.6AI score0.00317EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/09/27 12:31 p.m.•28 views

CVE-2024-9281 bg5sbk MiniCMS post-edit.php cross-site request forgery

A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic. This issue affects some unknown processing of the file post-edit.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and...

6.9CVSS0.00356EPSS
SaveExploits1References4
OSV
OSV
•added 2024/09/27 12:31 p.m.•12 views

CVE-2024-9281 bg5sbk MiniCMS post-edit.php cross-site request forgery

A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic. This issue affects some unknown processing of the file post-edit.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and...

6.9CVSS4.8AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•12 views

MiniCMS 跨站请求伪造漏洞

MiniCMS is a mini content management system designed for personal websites by Dada bg5sbk individual developers. A cross-site request forgery vulnerability exists in MiniCMS 1.11 and earlier versions, which stems from some unknown processing in the file post-edit.php that can lead to cross-site...

6.9CVSS4.8AI score0.00356EPSS
SaveExploits1References6
NVD
NVD
•added 2024/07/26 5:15 p.m.•24 views

CVE-2024-41354

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/widgets/edit.php...

7.1CVSS0.00326EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/26 4:15 p.m.•22 views

CVE-2024-41357

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...

7.1CVSS0.01119EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2024/07/21 4:00 a.m.•43 views

CVE-2024-6937 formtools.org Form Tools Import Option List edit.php curl_exec file inclusion

A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curlexec of the file /admin/forms/optionlists/edit.php of the component Import Option List. The manipulation of the argument url leads to file inclusion. It is possible to...

5.1CVSS0.00368EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/07 12:00 a.m.•18 views

PT-2024-31839 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A vulnerability was found in DedeCMS, affecting an unknown functionality of the file /src/dede/mytag edit.php. This issue leads to cross-site request forgery and can be launched remotely. Recommendations: For...

5CVSS4.9AI score0.0042EPSS
SaveExploits1References7
NVD
NVD
•added 2024/04/07 6:15 p.m.•29 views

CVE-2024-3428

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

6.1CVSS3.9AI score0.0057EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/07 5:31 p.m.•18 views

CVE-2024-3428 SourceCodester Online Courseware edit.php cross site scripting

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

4CVSS6.4AI score0.0057EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/07 5:31 p.m.•88 views

CVE-2024-3428

CVE-2024-3428 affects SourceCodester Online Courseware 1.0 in the edit.php file, where manipulation of the id parameter leads to cross-site scripting. The vulnerability is exploitable remotely, and public disclosures exist. Multiple connected sources confirm the issue and the affected component (...

6.1CVSS3.9AI score0.0057EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2024/04/07 10:00 a.m.•94 views

CVE-2024-3419

CVE-2024-3419 affects SourceCodester Online Courseware 1.0; SQL injection via the id parameter in admin/edit.php is the root cause. The vulnerability is exploitable remotely and exploits have been publicly disclosed. No patch/version fix details are provided in the connected documents. Mitigation...

9.8CVSS6.8AI score0.00756EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•16 views

PT-2024-25729 · Unknown · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file admin/edit.php. The manipulation of the id argument leads to SQL injection. The attack c...

9.8CVSS6.8AI score0.00756EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/03/22 12:00 a.m.•12 views

PT-2024-22343 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic issue was found in DedeCMS, affecting an unknown part of the file /src/dede/vote edit.php. The manipulation of the aid argument leads to cross-site request forgery. It is possible to initiate the...

6.1CVSS4.9AI score0.0037EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2024/02/21 4:31 p.m.•57 views

CVE-2024-1702 keerti1924 PHP-MYSQL-User-Login-System edit.php sql injection

A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /edit.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publi...

6.5CVSS6.9AI score0.00662EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/21 3:31 p.m.•20 views

CVE-2024-1701 keerti1924 PHP-MYSQL-User-Login-System edit.php access control

A vulnerability has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edit.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been...

5.3CVSS5.4AI score0.00808EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/14 3:15 p.m.•21 views

Sql injection

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...

5.8CVSS8.6AI score0.00716EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•13 views

Employee Managment System SQL Injection Vulnerability

Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /edit.php...

7.2CVSS7.9AI score0.00716EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/17 6:15 p.m.•31 views

CVE-2024-22715

Stupid Simple CMS =1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin-edit.php...

8.8CVSS8.9AI score0.00303EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/17 12:00 a.m.•41 views

CVE-2024-22715

Stupid Simple CMS =1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin-edit.php...

9.1AI score0.00303EPSS
SaveExploits1References1
Rows per page
Query Builder