CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Controllo di accesso improprio Descrizione Nella versione 6.03 del CMS BoltWire , è possibile sfruttare una vulnerabilità di “Controllo degli accessi improprio” tramite il parametro index.php?p=member.admin&action=data, consentendo a un attaccante di visualizzare...

CVE-2022-24227-updated

CVE-2022-24227 Aggiornata - BoltWire v8.00 - Cross-site Scripting persistente XSS Descrizione CVE-2022-24227 Aggiornata : nella versione 8.00 di BoltWire CMS , i campi Nome e Cognome nella pagina di completamento della registrazione del membro sono anch'essi vulnerabili ad attacchi di cross-site...

EUVD-2013-2590

Malware in sbrugna...

EUVD-2013-0748

Malware in sbrugna...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

The vulnerability of the BoltWire content management system, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the BoltWire content management system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

Design/Logic Flaw

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

BoltWire CMS v6.03 is affected by an vulnerability described across multiple sources as an improper access control issue that enables a remote attacker to obtain sensitive information by crafting payloads to the view and change admin password function. The issue is consistently tied to BoltWire v...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

BoltWire Security Vulnerability

BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A security vulnerability exists in BoltWire version v.6.03, which stems from a vulnerability that allows remote attackers to obtain sensitive information via a crafted...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

PT-2023-7563 · Boltwire · Boltwire

Name of the Vulnerable Software and Affected Versions: BoltWire version 6.03 Description: The issue in BoltWire allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. This is related to insufficient protection of service data...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

Cross site scripting

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...