EUVD-2021-28109

Malicious code in bioql PyPI...

EUVD-2022-47866

Malicious code in bioql PyPI...

EUVD-2025-14270

Malicious code in bioql PyPI...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

CVE-2025-4560 Netvision ISOinsight - Missing Authentication

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...

CVE-2022-44849

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

PT-2022-27324 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.7 Description: A Cross-Site Request Forgery CSRF issue in the Administrator List allows attackers to arbitrarily add a Super Administrator account. This enables unauthorized access and control over the system. Recommendation...

CVE-2022-44849

MetInfo v7.7 contains a CSRF in the Administrator List that allows an attacker to arbitrarily add a Super Administrator account. Affected component: Administrator List (MetInfo 7.7). Root cause: CSRF-vulnerability enabling unauthorized privilege elevation. Impact per sources: high confidentiality...

CVE-2022-44849

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

Cross site request forgery (csrf)

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

CVE-2022-44937

Bosscms v2.0.0 is affected by a Cross-Site Request Forgery (CSRF) in the Add function of the Administrator List module. The issue, documented across multiple sources, indicates that an unauthorized action could be performed by an authenticated user if CSRF protections are not enforced. The CVE is...

PT-2022-27338 · Bosscms · Bosscms

Name of the Vulnerable Software and Affected Versions: Bosscms version 2.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF that was discovered in Bosscms. This CSRF is specifically via the Add function under the Administrator List module. Recommendations: For Bosscms...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

BossCMS 跨站请求伪造漏洞

Wenzhou Huoyin Information Technology BossCMS is a content management system based on MySQL architecture of self-developed PHP framework by Wenzhou Huoyin Information Technology. A security vulnerability exists in BossCMS v2.0.0, which was discovered through the add function under the administrat...

CVE-2021-40955

SQL injection exists in LaiKetui v3.5.0 the background administrator list...

CVE-2021-40955

CVE-2021-40955 describes an SQL injection in LaiKetui v3.5.0, specifically in the background administrator list. The vulnerability stems from how input is handled in that component, enabling partial to high impact across confidentiality, integrity, and availability per CVSS metrics (CVSS2 base 6....