25 matches found
Online Complaint Site index.php File SQL Injection Vulnerability
Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in file /cms/users/index.php. An attacker can exploit this vulnerability...
Online Complaint Site /cms/users/complaint-details.php File SQL Injection Vulnerability
Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from improperly filtered SQL statements submitted in the /cms/users/complaint-details.php file, which can be exploited by an attacker to obtain sensitive data and mo...
CVE-2025-11514
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11514 code-projects Online Complaint Site index.php sql injection
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11514 code-projects Online Complaint Site index.php sql injection
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...
Code-Projects Online Complaint Site SQL注入漏洞
Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from improperly filtered SQL statements submitted in the /cms/users/complaint-details.php file, which can be exploited by an attacker to obtain sensitive data and mo...
CVE-2025-11514: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of the file /cms/users/index.php. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11516: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /cms/users/complaint-details.php. Executing manipulation of the argument cid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...
PT-2025-41322
Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in code-projects Online Complaint Site 1.0 that allows for SQL injection. This occurs through manipulation of the Username argument in the file '/cms/users/index.php'. T...
EUVD-2019-0733
Malware in sbrugna...
Privilege Escalation
silverstripe/framework is vulnerable to privilege escalation. Due to incorrectly shared caches between files and page content, CMS users with different permissions for these object types could gain more access than defined by the system...
GHSA-6R58-4XGR-GM6M SilverStripe Priviledge escalation through cache pollution
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
SilverStripe Priviledge escalation through cache pollution
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
CVE-2019-12617
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
CVE-2019-12617
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
Design/Logic Flaw
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
CVE-2019-12617
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...
CVE-2019-12617
CVE-2019-12617 affects SilverStripe prior to or including version 4.3.3, with an access escalation vulnerability where CMS users with limited permissions can gain higher privileges due to a permission cache pollution issue. The connected records consistently describe “permission cache pollution” ...
