CVE-2024-0729 ForU CMS cms_admin.php sql injection

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue is some unknown functionality of the file cmsadmin.php. The manipulation of the argument aname leads to sql injection. The exploit has been disclosed to the public and may be use...

CVE-2024-0729

CVE-2024-0729 pertains to ForU CMS, where the vulnerability exists in the file cms_admin.php and is triggered by manipulating the parameter a_name to cause a SQL injection. Affected versions are listed as up to 2020-06-23. The exploitation vector is not fully specified in the provided documents, ...

CVE-2024-0728 ForU CMS channel.php file inclusion

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-0728 ForU CMS channel.php file inclusion

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-0728

ForU CMS (up to 2020-06-23) contains a file inclusion vulnerability in channel.php triggered by manipulating the c_cmodel parameter. This affects an unknown functionality within channel.php and can be exploited remotely; the exploit has been disclosed publicly (VDB-251551). Several sources (NVD, ...

PT-2024-15786 · Foru Cms · Foru Cms

Name of the Vulnerable Software and Affected Versions: ForU CMS versions up to 2020-06-23 Description: A critical issue has been found in ForU CMS, affecting some unknown functionality of the file cms admin.php. The manipulation of the a name argument leads to sql injection. The exploit has been...

PT-2024-15785 · Foru Cms · Foru Cms

Name of the Vulnerable Software and Affected Versions: ForU CMS versions up to 2020-06-23 Description: A problematic issue was found in ForU CMS, affecting an unknown functionality of the file channel.php. The manipulation of the c cmodel argument leads to file inclusion. This issue can be...

ForU CMS Security Vulnerability

ForU CMS is a website builder system by ForU open source. A security vulnerability exists in ForU CMS version 2020-06-23 and earlier, which stems from the parameter ccmodel in the file channel.php that causes the file to contain...

CVE-2024-0426

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0426

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

Sql injection

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0426 ForU CMS cms_template.php sql injection

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cmstemplate.php. The manipulation of the argument tname/tpath leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0426

CVE-2024-0426 affects ForU CMS older releases (up to 2020-06-23) via SQL injection in admin/cms_template.php by manipulating t_name/t_path. The issue enables remote exploitation with HIGH impact on confidentiality, integrity, and availability; the exploit has been disclosed publicly. Connected so...

CVE-2024-0425

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=resetadminpsw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-0425

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=resetadminpsw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publ...

Design/Logic Flaw

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=resetadminpsw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-0425 ForU CMS password recovery

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=resetadminpsw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-0425

ForU CMS (versions up to 2020-06-23) contains a vulnerability in /admin/index.php?act=reset_admin_psw that enables weak password recovery. The issue can be exploited remotely, and public disclosures exist. Several sources identify this as critical with remote access and potential impact to authen...

CVE-2024-0425 ForU CMS password recovery

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=resetadminpsw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publ...

PT-2024-15548 · Foru Cms · Foru Cms

Name of the Vulnerable Software and Affected Versions: ForU CMS versions up to 2020-06-23 Description: A critical issue was found in ForU CMS, affecting the file /admin/index.php?act=reset admin psw. This issue leads to weak password recovery and can be initiated remotely. Recommendations: For...