Information Disclosure

lavalite/cms is vulnerable to Information Disclosure. The vulnerability exists due to lack of access restrictions which allows an attacker to gain access to sensitive information...

Information Disclosure

lavalite/cms is vulnerable to Information Disclosure. The vulnerability exists due to lack of access restrictions which allows an attacker to gain access to sensitive information...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

Code injection

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

Code injection

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

PT-2023-25763 · Unknown · Lavalite Cms

Name of the Vulnerable Software and Affected Versions: LavaLite CMS version 9.0.0 Description: The issue concerns Sensitive Data Exposure. Recommendations: For LavaLite CMS version 9.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

Lavalite CMS Security Vulnerability

Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...

CVE-2023-36984

CVE-2023-36984 affects LavaLite CMS v9.0.0. The provided documents identify a sensitive data exposure due to lack of access restrictions (no explicit exploit details). Public sources indicate this is a vulnerability in LavaLite CMS 9.0.0 with no confirmed fix in the supplied materials; one entry ...

Lavalite CMS Security Vulnerability

Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

Technical details about CVE-2023-36983 are not publicly provided in the connected documents. No explicit affected versions, root cause, impact, or remediation are present here. Monitor for updates and additional disclosures.

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

Cross-Site Scripting (XSS)

lavalite/cms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the account name parameter, which allows an attacker to inject arbitrary JavaScript into the browser...

DNS Rebinding

lavalite/cms is vulnerable to DNS rebinding. The vulnerability exists because it does not properly validate DNS records in the ResourceController class of ResourceController.php, which allows attackers to control the victim's DNS records or spoof their responses...