Sql injection

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevelid=1 userlevelid parameter...

CVE-2020-19165

PHPSHE 1.7 is affected by CVE-2020-19165: an SQL injection in the admin.php?mod=user&userlevel_id=1 and userlevel_id[] parameter. The issue originates from unsafely handling userlevel_id input, enabling an attacker to manipulate SQL queries. No remediation details are provided in the connected do...

CVE-2020-19165

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevelid=1 userlevelid parameter...

PT-2020-15170

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description The issue is related to SQL injection via the "admin.php?mod=user&userlevel id=1" API endpoint, specifically through the userlevel id parameter. This allows for potential exploitation. Recommendations For PHPSHE...

CVE-2020-19165: Improper Neutralization of Special Elements used in an SQL Command

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevelid=1 userlevelid parameter...

CVE-2020-25273

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

PT-2020-16056

Name of the Vulnerable Software and Affected Versions SourceCodester Online Bus Booking System version 1.0 Description The issue concerns an authentication bypass on the Admin Login screen. This is achieved through SQL injection in the username or password fields in the admin.php file...

CVE-2020-25273: Improper Neutralization of Special Elements used in an SQL Command

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

CVE-2020-17551

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

CVE-2020-17551

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

Remote code execution

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

CVE-2020-17551

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

CVE-2020-17551

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

PT-2020-15037

Name of the Vulnerable Software and Affected Versions ImpressCMS version 1.4.0 Description The issue concerns a potential XSS in the modules/system/admin.php file, which could lead to arbitrary remote code execution. Recommendations For ImpressCMS version 1.4.0, consider restricting access to the...

CVE-2020-17551: Improper Neutralization of Input During Web Page Generation

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution...

PT-2020-15590

Name of the Vulnerable Software and Affected Versions Projectworlds Car Rental Management System version 1.0 Description A Persistent Cross-Site Scripting XSS issue in the message admin.php file allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin...

CVE-2020-21564

CVE-2020-21564 concerns Pluck CMS versions 4.7.10-dev2 and 4.7.11, where a file upload vulnerability can lead to remote command execution via the endpoint admin.php?action=files. The sources provided describe the vulnerability but do not specify additional technical details, exploit status, affec...

CVE-2020-21564

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files...

PT-2020-15374

Name of the Vulnerable Software and Affected Versions Pluck CMS versions 4.7.10-dev2 through 4.7.11 Description The issue is related to a file upload vulnerability that can lead to remote command execution. This can be achieved via the "admin.php?action=files" endpoint. The vulnerability allows f...

CVE-2020-21564: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files...