5001 matches found
Cross site scripting
CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting XSS. This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field...
CVE-2024-27625
CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting XSS. This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field...
CVE-2024-27626
CVE-2024-27626 affects Dotclear 2.29, with a Reflected Cross-Site Scripting (XSS) issue in the Admin Panel Search function. The CVE entry lists CVSSv3.1 metrics: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (base score 6.1, MEDIUM). Impact is limited to confidentiality and integrity (LOW) with no availabi...
CVE-2024-27626
A Reflected Cross-Site Scripting XSS vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel...
CVE-2024-27626
A Reflected Cross-Site Scripting XSS vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel...
CVE-2024-27625
CVE-2024-27625 affects CMS Made Simple version 2.2.19 and specifically targets the File Manager module in the admin panel. The root cause is inadequate sanitization of user input in the "New directory" field, enabling cross-site scripting (XSS). The vulnerability is documented across multiple sou...
PT-2024-21975 · Dotclear · Dotclear
Name of the Vulnerable Software and Affected Versions: Dotclear version 2.29 Description: A Reflected Cross-Site Scripting XSS issue has been identified in the Search functionality of the Admin Panel. Recommendations: For Dotclear version 2.29, consider disabling the Search functionality within t...
CVE-2024-27626
A Reflected Cross-Site Scripting XSS vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel...
GL.iNet AR300M v4.3.7 Arbitrary File Read Exploit
!/usr/bin/env python3 Exploit Title: GL.iNet = 4.3.7 Arbitrary File Write Google Dork: intitle:"GL.iNet Admin Panel" Date: XX/11/2023 Exploit Author: Michele 'cyberaz0r' Di Bonaventura Vendor Homepage: https://www.gli-net.com Software Link:...
Zoo Management System /zms/admin/changeimage.php File SQL Injection Vulnerability
Zoo Management System is a zoo management system. Zoo Management System has a SQL injection vulnerability that originates from a SQL injection vulnerability in the editid parameter of the /zms/admin/changeimage.php file, no details of the vulnerability are available at this time...
Access Control Bypass
mezzanine is vulnerable to an Access Control Bypass. The vulnerability is caused by a crafted request to the admin panel allowing unauthorized individuals to bypass restrictions and potentially gain unauthorized access...
Mezzanine allows attackers to bypass access control mechanisms
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
GHSA-QP56-82VP-XQGV Mezzanine allows attackers to bypass access control mechanisms
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
CVE-2024-25169
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
Design/Logic Flaw
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
Mezzanine Security Breach
Github Mezzanine is a powerful, consistent and flexible content management platform. A security vulnerability exists in Mezzanine version v6.0.0, which stems from a vulnerability that allows an attacker to bypass the access control mechanism in the admin panel via a specially crafted request...
PT-2024-20797
Name of the Vulnerable Software and Affected Versions Mezzanine version 6.0.0 Description An issue in Mezzanine allows attackers to bypass access control mechanisms in the admin panel via a crafted request. Recommendations For Mezzanine version 6.0.0, consider restricting access to the admin pane...
CVE-2024-25169
An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...
CVE-2024-25169
The CVE-2024-25169 issue affects Mezzanine v6.0.0, where an attacker can bypass admin-panel access controls through a crafted request, as reported by Red Hat, Veracode, OSV, GHSA, NVD, CNNVD, and others. The consensus description is that an unauthorized user could bypass restrictions in the admin...