CVE-2026-51564

CVE-2026-51564 CVE-2026-51564 のセキュリティアドバイザリ 説明 Milk admin =0.9.8 の redirect パラメータに存在する問題により、リモートの攻撃者が細工したリクエストを介してユーザーを任意の外部 URL にリダイレクトさせることが可能です。影響を受けるコンポーネント: App/Route.php、publichtml/index.php 緩和策 本公開時点では、この脆弱性は5か月前に報告されているにもかかわらず、開発者から公式のパッチは提供されていません。更新版がリリースされるまで、管理者は可能な限り影響を受ける redirect...

CVE-2026-51565

CVE-2026-51565 CVE-2026-51565 に関するセキュリティアドバイザリ 説明 Modules/Docs/DocsController.php における Milk admin =0.9.8 のクロスサイトスクリプティング（XSS）脆弱性により、リモートの攻撃者が巧妙に細工されたリクエストの action パラメータを介して、任意の Web スクリプトまたは HTML を注入できる可能性があります。 緩和策 公開時点では、この脆弱性に対する公式パッチは開発者から提供されておらず、私が報告してから5か月が経過しています。更新版がリリースされるまでは、ModSecurity...

EUVD-2026-49669

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

EUVD-2026-49638

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51565: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51564: URL Redirection to Untrusted Site

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

PT-2026-65311

Name of the Vulnerable Software and Affected Versions Milk admin versions 0.9.8 and earlier Description An issue exists where remote attackers can redirect users to arbitrary external URLs by sending a crafted request. This is caused by improper handling of the redirect parameter. Recommendations...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

PT-2026-65313

Name of the Vulnerable Software and Affected Versions Milk admin versions prior to 0.9.9 Description Cross-site scripting XSS occurs in the Modules/Docs/DocsController.php file. This issue allows remote attackers to inject arbitrary HTML or web scripts through the action parameter in a specially...

CVE-2026-51565

A Cross-site scripting (XSS) vulnerability exists in the Modules/Docs/DocsController.php component of Milk admin versions

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

EUVD-2025-76282

Malicious code in milk-notthedevs npm...

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

en.seoulmilk.co.kr Cross Site Scripting vulnerability OBB-3167129

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...