CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

Arbitrary file deletion

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

CVE-2023-39112

ECShop v4.1.16 has an arbitrary file deletion vulnerability in the Admin Panel (CVE-2023-39112). Public sources confirm the affected product/version and impact on integrity and availability, with CVSS 3.1 metrics: I:H, A:H, C:N; no details on root cause in the provided documents. No exploitation ...

ShopeX ECShop Authorization Issues Vulnerability

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop v4.1.16 version of a security vulnerability , the vulnerabilit...

PT-2023-26787 · Ecshop · Ecshop

Name of the Vulnerable Software and Affected Versions: ECShop version 4.1.16 Description: The issue is related to an arbitrary file deletion vulnerability in the Admin Panel. Recommendations: For ECShop version 4.1.16, at the moment, there is no information about a newer version that contains a f...

CVE-2023-39112

ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel...

Jenkins plugins Multiple Vulnerabilities (2022-06-30)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulti...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Cross site scripting

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Barebones CMS Cross-Site Scripting Vulnerability

Barebones CMS is an open source software from Barebones CMS, Inc. A cross-site scripting vulnerability exists in Barebones CMS version v2.0.2, which stems from a cross-site scripting vulnerability in user interaction with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CoolAdmin 1.0 SQL Injection

==================================================================================================================================== | Title : CoolAdmin 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendo...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open...

MAL-2023-8007 Malicious code in @rocketrefer/admin-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cee4d7f564848bd4bb2a8a410f60f22ce1bce642072b14a97281130483c8c1a9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Daimler Truck: Blind xss at https://homologation.omniplus.com/

Hello team, I have found a blind xss leads to admin panel exposed with cookie StepToReproduce 1- Navigate to https://homologation.omniplus.com/ 2- You will face a submit form contains 6 pages 3- At each input field you have to put your blind xss payload , for me I used xss.report just go there an...

Cloud Base Multiple School Generate And Management System 4.6.0 SQL Injection

==================================================================================================================================== | Title : Cloud Base Multiple school Generate & Management System v4.6.0 Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pr...

Job Portal CMS 2.3.0.2 SQL Injection

==================================================================================================================================== | Title : Job Portal CMS V2.3.0.2 Sql Injection Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 Français V.Pro | | Vendor ...