133 matches found
CVE-2026-88418
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection into a no-op on every state-changing admin request, and it does not send the csrftoken hidden field in admin forms. Because administrator authentication is cookie-only and no CSRF token is enforced, an...
EUVD-2026-84857
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection into a no-op on every state-changing admin request, and it does not send the csrftoken hidden field in admin forms. Because administrator authentication is cookie-only and no CSRF token is enforced, an...
CVE-2026-88418
CMSimple 5.24 is vulnerable to persistent remote code execution because it ships with CSRF protection disabled by default. This flaw causes csrfProtection() to become a no-op on state-changing admin requests and omits the csrf_token hidden field in admin forms. An unauthenticated attacker can tri...
CVE-2026-5829 code-projects Simple IT Discussion Forum content.php sql injection
A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument postid causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...
CVE-2026-5829: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument postid causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...
PT-2026-31561
Name of the Vulnerable Software and Affected Versions Simple IT Discussion Forum version 1.0 Description A SQL injection issue exists in Simple IT Discussion Forum 1.0 due to manipulation of the post id argument within an unknown function of the /pages/content.php file. This allows for remote...
EUVD-2006-2850
Malware in sbrugna...
EUVD-2010-0982
Malware in sbrugna...
EUVD-2020-12911
Malware in sbrugna...
EUVD-2005-3981
Malware in sbrugna...
EUVD-2019-7465
Malware in sbrugna...
EUVD-2020-16715
Malware in sbrugna...
EUVD-2017-7403
Malware in sbrugna...
EUVD-2017-8728
Malware in sbrugna...
EUVD-2020-16717
Malware in sbrugna...
EUVD-2020-16712
Malware in sbrugna...
CVE-2025-6870
CVE-2025-6870 affects SourceCodester Simple Company Website 1.0. Affected component: the file /classes/Content.php?f=service, where manipulation of the parameter img enables unrestricted upload. Root cause stated as improper handling of the img argument allowing remote exploitation; exploitation ...
CVE-2025-6870 SourceCodester Simple Company Website Content.php unrestricted upload
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...
CVE-2025-6870: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...
