CVE-2022-24601

Luocms v2.0 is affected by a SQL Injection vulnerability in /admin/manager/admin_mod.php due to lack of validation/ sanitization of external input in SQL statements. An attacker could obtain sensitive database data. This CVE (CVE-2022-24601) is documented across multiple feeds (NVD, CNVD, Red Hat...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

JetBlue: Access to tomcat-manager with default creds

The Apache Tomcat/6.0.35 server used by a domain was vulnerable to improper authentication due to the use of default credentials, allowing unauthorized access to the admin manager. The vulnerability was discovered and reported...

CVE-2018-13445

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...

Cross site request forgery (csrf)

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...

Cross-site Scripting (XSS)

spring-batch-admin-manager is vulnerable to stored cross-site scripting XSS attacks. Attackers can inject arbitrary webscript or HTML using the file upload feature...

MaxCMS 2.0 Create New Admin

?php printr' +---------------------------------------------------------------------------+ maxcms2.0 creat new admin exploit by Securitylab.ir +---------------------------------------------------------------------------+ '; if $argc 3 printr'...

[KAPDA::#41] - Mambo/Joomla rss component vulnerability

KAPDA New advisory Mambo website : http://www.mamboserver.com Bug: Path Disclosure & Remote Denial Of Service Exploitation: Remote with browser Exploit: available Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from...