PT-2024-30056 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability can be exploited via the "/admin/admin group.php?mode=delete&group id=3" endpoint. This allows for unauthorized action...

PT-2024-30059 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to database. Recommendations: For...

PT-2024-38692 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical vulnerability has been found in ZZCMS. The issue affects an unknown function of the file /admin/about edit.php?action=modify. The manipulation of the skin argument leads to path traversal. It is...

PT-2024-30079 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/page/edit/10" API endpoint. Recommendations: For FrogCMS version 0.9.5, consider...

PT-2024-30081 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/plugin/file manager/create file" API endpoint. Recommendations: For FrogCMS version...

PT-2024-30078 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/snippet/edit/3" endpoint. Recommendations: For FrogCMS version 0.9.5, as a temporary...

CVE-2024-33959

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in...

PT-2024-25608 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: A Cross-Site Scripting XSS issue allows an attacker to partially take over an authenticated user's browser session. This can be achieved by sending a specially crafted JavaScript payload via the id...

PT-2024-25595 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: PayPal, Credit Card and Debit Card Payment version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This can lead to the retrieval of all information...

PT-2024-25597 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: Payment system versions 1.0 Description: A SQL injection issue affects the PayPal, Credit Card, and Debit Card Payment system. An attacker could exploit this by sending a specially crafted query to the server, allowing them to retrieve all...

Mercodia Feripro 安全漏洞

Mercodia Feripro is a vacation management software from Mercodia USA. A security vulnerability exists in Mercodia Feripro 2.2.3 and earlier versions, which stems from an incorrect access control vulnerability in /admin/benutzer/institution/rechteverwaltung/uebersicht, which allows a remote attack...

PT-2024-38233 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A problematic issue was found in the system, affecting the file "/admin/ajax.php?action=save settings". The manipulation of the about argument leads to cross-site...

PT-2024-38162 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file "/admin/ajax.php?action=save settings". The manipulation of the name argument...

PT-2024-37971

Name of the Vulnerable Software and Affected Versions LimeSurvey version 6.5.14-240624 Description A critical issue has been found, affecting the function actionUpdateSurveyLocaleSettingsGeneralSettings of the component Survey General Settings Handler, located in the file...

PT-2024-37970 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.5 Description: A vulnerability has been found in an unknown functionality of the file "/admin/?action=home&do=shop:index&keyword=&kind=all". The manipulation of the order argument leads to cross-site scripting. The attack c...

PT-2024-28805 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A SQL injection issue was discovered via the "/admin/div data/data" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devic...

CVE-2024-40334

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...

PT-2024-28762 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the "/admin/userLevel deal.php?mudi=add" endpoint. This allows for potentially malicious requests to be made without th...

PT-2024-28765 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited via the "/admin/userScore deal.php" endpoint, specifically when the mudi parameter is set to "rev"...

PT-2024-28766 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was found in idccms. The issue is related to the "/admin/userGroup deal.php" API endpoint, specifically with the mudi variable when set to "del". This allows for...