153 matches found
CVE-2019-11077
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
Cross site request forgery (csrf)
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
CVE-2019-11077
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
CVE-2019-11077
FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability that allows adding a new admin user via the URI admin/auth/admin/add?dialog=1. Root cause: CSRF protection missing/insufficient. CVSSv3.1 base score 8.8 (High), network vector, user interaction required; confidentiality, integrity, and avail...
CVE-2019-11077
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
CVE-2019-11077: Cross-Site Request Forgery (CSRF)
FastAdmin V1.0.0.20190111beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI...
FastAdmin Cross-Site Scripting Vulnerability
FastAdmin is a system backend development framework based on ThinkPHP and Bootstrap. A cross-site scripting vulnerability exists in FastAdmin version 1.0.0.20180417beta. A remote attacker can use the 'avatar' parameter to inject arbitrary web script or HTML...
CVE-2018-10268
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...
CVE-2018-10268
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...
Design/Logic Flaw
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...
CVE-2018-10268
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...
CVE-2018-10268
The CVE-2018-10268 entry affects FastAdmin v1.0.0.20180417_beta, where there is a cross-site scripting (XSS) vulnerability via the avatar parameter in application/api/controller/User.php. The issue is documented across multiple sources (CNVD, NVD, OSV, CVE records). Details consistently specify a...
CVE-2018-10268: Improper Neutralization of Input During Web Page Generation
An issue was discovered in FastAdmin V1.0.0.20180417beta. There is XSS via the application\api\controller\User.php avatar parameter...