CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

CVE-2022-24227-updated

CVE-2022-24227 Updated - BoltWire v8.00 - Stored Cross-site Scripting XSS Description CVE-2022-24227 Updated : In version 8.00 of BoltWire CMS , the First Name and Last Name fields on the member registration completion page are also vulnerable to stored cross-site scripting XSS attacks, just like...

EUVD-2013-0748

Malware in sbrugna...

EUVD-2013-2590

Malware in sbrugna...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

The vulnerability of the BoltWire content management system, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the BoltWire content management system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

Design/Logic Flaw

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

BoltWire CMS v6.03 is affected by an vulnerability described across multiple sources as an improper access control issue that enables a remote attacker to obtain sensitive information by crafting payloads to the view and change admin password function. The issue is consistently tied to BoltWire v...

CVE-2023-46501: Improper Access Control

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

BoltWire Security Vulnerability

BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A security vulnerability exists in BoltWire version v.6.03, which stems from a vulnerability that allows remote attackers to obtain sensitive information via a crafted...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

PT-2023-7563 · Boltwire · Boltwire

Name of the Vulnerable Software and Affected Versions: BoltWire version 6.03 Description: The issue in BoltWire allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. This is related to insufficient protection of service data...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

Cross site scripting

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...