219 matches found
Authorization Bypass Through User-Controlled Key
Overview pagekit/pagekit is a modular and lightweight CMS built with Symfony components and Vue.js. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via insufficient access control in the /api/user/role/bulk endpoint. An attacker can gain...
CVE-2025-67165
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
CVE-2025-67164
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-67165
Pagekit CMS version 1.0.18 is vulnerable to an Insecure Direct Object Reference (IDOR) in its User Role component. The flaw resides in the /api/user/role/bulk endpoint, where insufficient access control allows an attacker to gain unauthorized privileges by manipulating object identifiers in reque...
CVE-2025-67164
Pagekit CMS version 1.0.18 is vulnerable to an authenticated arbitrary file upload in the /storage/poc.php component. This flaw allows an authenticated attacker to upload a crafted PHP file, leading to arbitrary code execution . As a workaround, it is recommended to restrict access to the /storag...
CVE-2025-67165
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
CVE-2025-67164
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2025-51846
Name of the Vulnerable Software and Affected Versions Pagekit CMS version 1.0.18 Description An Insecure Direct Object Reference IDOR exists in Pagekit CMS version 1.0.18, potentially allowing attackers to escalate privileges. An IDOR occurs when an application uses user-supplied input to directl...
CVE-2025-67165
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
CVE-2025-67164
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2025-51845
Name of the Vulnerable Software and Affected Versions Pagekit CMS version 1.0.18 Description An authenticated user can upload arbitrary files through the /storage/poc.php component. Successful exploitation allows attackers to execute arbitrary code by uploading a crafted PHP file. The vulnerable...
CVE-2025-67164
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-67165: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
CVE-2025-67164: Improper Neutralization of Special Elements used in an OS Command
An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-67165
An Insecure Direct Object Reference IDOR in Pagekit CMS v1.0.18 allows attackers to escalate privileges...
Pagekit 安全漏洞
Pagekit is a modular, lightweight CMS Content Management System from Pagekit Open Source. A security vulnerability exists in Pagekit version 1.0.18, which stems from the presence of an insecure direct object reference that could lead to elevation of privilege...
Pagekit 安全漏洞
Pagekit is a modular, lightweight CMS Content Management System from Pagekit open source. A security vulnerability exists in Pagekit version 1.0.18, which originates from the presence of arbitrary file uploads in the /storage/poc.php component, which could lead to the execution of arbitrary code...
EUVD-2014-7918
Malware in sbrugna...