CVE-2022-36203

CVE-2022-36203 involves Doctor’s Appointment System version 1.0 and describes a Cross-Site Scripting (XSS) vulnerability in the admin panel that can result in taking over the administrator account by stealing the cookie. The vulnerability is documented with a CVSS v3.1 base score of 6.1 (Medium) ...

Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...

GHSA-RH4R-9689-6XW4 Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

Cross Site Scripting XSS in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field...

CVE-2022-37059

Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...

CVE-2022-37059

Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...

Cross site scripting

Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...

CVE-2022-37059

CVE-2022-37059 is an XSS vulnerability in the Admin Panel of Subrion CMS 4.2.1, allowing an attacker to inject arbitrary code through the Login Field. The issue is consistently described across Red Hat, CVE listings, and security advisories as a cross-site scripting flaw in Subrion CMS 4.2.1 with...

CVE-2022-37059

Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...

CVE-2022-37059

Cross Site Scripting XSS in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field...

PT-2022-23774 · Unknown · Subrion Cms

Name of the Vulnerable Software and Affected Versions: Subrion CMS version 4.2.1 Description: The issue allows an attacker to inject arbitrary code via the Login Field in the Admin Panel, potentially leading to Cross Site Scripting XSS attacks. No information is provided about the estimated numbe...

CVE-2022-36721

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php...

CVE-2021-30071

A cross-site scripting XSS vulnerability in /admin/listkey.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Chinese Hackers Using New Manjusaka Hacking Framework Similar to Cobalt Strike

Researchers have disclosed a new offensive framework referred to as Manjusaka that they call is a "Chinese sibling of Sliver and Cobalt Strike." "A fully functional version of the command-and-control C2, written in Golang with a User Interface in Simplified Chinese, is freely available and can...

Exploit for Cross-site Scripting in Phpgurukul Zoo_Management_System

CVE-2022-33075 Exploit Title: Zoo Management System 1.0 -...

Insecure Direct Object Reference

idno/known is vulnerable to Insecure Direct Object Reference. The vulnerable getContent and postContent functions in Homepage class in Homepage.php file allow remote authenticated attackers to gain access to certain settings of the admin panel due to the use of createGatekeeper inner function...

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

Privilege escalation

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel...

CVE-2022-31854

Codoforum v5.1 contains an arbitrary file upload vulnerability exploitable via the logo-change option in the admin panel. The underlying flaw allows uploading files that can be executed on the server, potentially enabling remote code execution after authentication. Public exploit materials and re...