PT-2023-18974 · Unknown · Media Cp Media Control Panel

Name of the Vulnerable Software and Affected Versions: Media CP Media Control Panel latest version Description: The issue allows for CSRF, which is possible through an unspecified endpoint. Recommendations: For the latest version of Media CP Media Control Panel, at the moment, there is no...

CVE-2023-23466

Technical details about CVE-2023-23466 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23467 Media CP Media Control Panel – Reflected XSS

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23465: Cross-Site Request Forgery (CSRF)

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...

CVE-2023-23467

Media CP Media Control Panel shows a reflected XSS vulnerability via an unspecified endpoint. The Connected documents consistently describe reflected XSS without detailing affected versions, exploit specifics, or a fix. No remediation information is provided in the supplied sources; monitor for u...

CVE-2023-23465 Media CP Media Control Panel – CSRF

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...

CVE-2023-23464

CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...

CVE-2023-23467: Improper Neutralization of Input During Web Page Generation

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23466: Insufficiently Protected Credentials

Media CP Media Control Panel latest version. Insufficiently protected credential change...

Media CP Media Control Panel 跨站请求伪造漏洞

MEDIA CONTROL PANEL Media CP Media Control Panel is an application from MEDIA CONTROL PANEL, Inc. A security vulnerability exists in Media CP Media Control Panel, which can be exploited by an attacker to conduct cross-site request forgery CSRF via an unspecified endpoint...

PT-2023-18976 · Unknown · Media Cp Media Control Panel

Name of the Vulnerable Software and Affected Versions: Media CP Media Control Panel latest version Description: The issue concerns a reflected XSS that can be executed through an unspecified endpoint. There is no information provided about the estimated number of potentially affected devices...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953: Undefined Security Weakness

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

PT-2023-18795 · Ellislab · Expressionengine

Name of the Vulnerable Software and Affected Versions: ExpressionEngine versions prior to 7.2.6 Description: The issue allows remote code execution by an authenticated Control Panel user. Recommendations: For versions prior to 7.2.6, update to version 7.2.6 or later to resolve the issue...

CVE-2022-47648

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

CVE-2022-47648: Improper Access Control

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...

BDWeb-Link LMS 1.11.5 Insecure Direct Object Reference

==================================================================================================================================== | Title : BDWeb-Link Lms v1.11.5 Unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozil...

Control iD Panel 跨站脚本漏洞

Control iD Panel is a web application. Control iD Panel suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the Nome parameter leading to cross-site scripting...