PT-2019-7196

Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.9 Description A cross-site request forgery issue exists, allowing remote attackers to hijack the authentication of admin users for requests that may cause a denial of service due to resource consumption. This iss...

CVE-2015-5595: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack the authentication of admin users for requests that may cause a denial of service resource consumption...

CVE-2019-14344

TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...

PT-2019-13623

Name of the Vulnerable Software and Affected Versions TemaTres version 3.0 Description The issue is related to reflected XSS. It can be triggered via the replace string or search string parameter to the "vocab/admin.php?doAdmin=bulkReplace" API endpoint. Recommendations For TemaTres version 3.0,...

CVE-2019-14344: Improper Neutralization of Input During Web Page Generation

TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...

CVE-2013-5978

Multiple cross-site scripting XSS vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Product name or 2 Price description fields via a request to wp-admin/admin.php. NOTE: This issue may on...

PT-2019-6990

Name of the Vulnerable Software and Affected Versions Cart66 Lite plugin versions prior to 1.5.1.15 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific fields, including...

PT-2019-6066

Name of the Vulnerable Software and Affected Versions PopojiCMS version 1.2 Description The issue exists due to a lack of protection for the web page structure in the /admin.php?mod=user&act=addnew endpoint of the content management system. This allows a remote attacker to execute arbitrary web o...

CVE-2019-14343

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

Cross site scripting

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

PT-2019-13622

Name of the Vulnerable Software and Affected Versions TemaTres version 3.0 Description The issue is related to stored XSS, which occurs via the value parameter to the "vocab/admin.php?vocabulario id=list" URI. This allows for potential malicious script execution. Recommendations For TemaTres...

CVE-2019-14343: Improper Neutralization of Input During Web Page Generation

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...

CVE-2019-17593

CVE-2019-17593 affects JIZHICMS 1.5.1, where a CSRF flaw in admin.php/Admin/adminadd.html can be exploited to add an administrator. Multiple sources (NVD, RH, CNVD, OSV, CVE lists) corroborate that this is a cross‑site request forgery vulnerability in JIZHICMS 1.5.1. The CVSS data from NVD indica...

CVE-2019-17580

tonyy dormsystem through 1.3 allows SQL Injection in admin.php...

Sql injection

tonyy dormsystem through 1.3 allows SQL Injection in admin.php...

CVE-2019-17580

tonyy dormsystem through 1.3 allows SQL Injection in admin.php...

CVE-2019-17580

tonyy dormsystem through 1.3 allows SQL Injection in admin.php...

CVE-2019-17580

The CVE-2019-17580 entry corresponds to Tooonyy dormsystem prior to or at version 1.3, where a SQL injection vulnerability exists in admin.php due to lack of validation of externally-entered SQL statements. The connected records (CNVD-2020-14283, RH: CVE-2019-17580, OSV and CVE listings) corrobor...

PT-2019-15213

Name of the Vulnerable Software and Affected Versions dormsystem versions through 1.3 Description The issue allows SQL Injection in the admin.php file. Recommendations For versions through 1.3, update to a version that contains a fix for this issue to prevent SQL Injection attacks...

PT-2019-15218

Name of the Vulnerable Software and Affected Versions JIZHICMS version 1.5.1 Description The issue allows for a CSRF attack on the admin.php/Admin/adminadd.html endpoint to add an administrator. Recommendations For JIZHICMS version 1.5.1, consider implementing CSRF protection measures to prevent...