5001 matches found
CVE-2022-37059
CVE-2022-37059 is an XSS vulnerability in the Admin Panel of Subrion CMS 4.2.1, allowing an attacker to inject arbitrary code through the Login Field. The issue is consistently described across Red Hat, CVE listings, and security advisories as a cross-site scripting flaw in Subrion CMS 4.2.1 with...
CVE-2022-37059
Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...
PT-2022-23774 · Unknown · Subrion Cms
Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue allows an attacker to inject arbitrary code via the Login Field in the Admin Panel, potentially leading to Cross Site Scripting XSS attacks. No information is provided about the estimated numbe...
CVE-2022-36721
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php...
CVE-2021-30071
A cross-site scripting XSS vulnerability in /admin/listkey.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt Strike
Researchers have disclosed a new offensive framework referred to as Manjusaka that they call is a "Chinese sibling of Sliver and Cobalt Strike." "A fully functional version of the command-and-control C2, written in Golang with a User Interface in Simplified Chinese, is freely available and can...
Exploit for Cross-site Scripting in Phpgurukul Zoo_Management_System
CVE-2022-33075 Exploit Title: Zoo Management System 1.0 -...
Insecure Direct Object Reference
idno/known is vulnerable to Insecure Direct Object Reference. The vulnerable getContent and postContent functions in Homepage class in Homepage.php file allow remote authenticated attackers to gain access to certain settings of the admin panel due to the use of createGatekeeper inner function...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
Privilege escalation
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...
CVE-2022-31854
Codoforum v5.1 contains an arbitrary file upload vulnerability exploitable via the logo-change option in the admin panel. The underlying flaw allows uploading files that can be executed on the server, potentially enabling remote code execution after authentication. Public exploit materials and re...
PT-2022-20958 · Codoforum · Codoforum
Name of the Vulnerable Software and Affected Versions: Codoforum version 5.1 Description: The issue is related to an arbitrary file upload vulnerability via the logo change option in the admin panel. This vulnerability can potentially lead to remote code execution. Recommendations: For Codoforum...
Codoforum 代码问题漏洞
Codoforum is a PHP and MySQL based forum software. A security vulnerability exists in Codoforum v5.1, which originates from an arbitrary file upload vulnerability discovered via the logo change option in the admin panel...
Cross site scripting
ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...
Radancy: Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS
Hello team , I found Dom-XSS in your https://████████/ Webmail Admin Panel that manage attacker to stealing admin sensitive info and doing any action in your webmail admin panel . why and how this vulnerability happen : - if your reviewed the source code of this endpoint of the admin panel "...
Zoo Management System 1.0 Cross Site Scripting
Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0...