3783 matches found
PT-2019-9567
Name of the Vulnerable Software and Affected Versions waimai Super Cms version 20150505 Description The issue is related to an XSS vulnerability. It can be exploited via the "/admin.php/Foodcat/addsave" API endpoint, specifically through the fcname parameter. Recommendations For waimai Super Cms...
[20190603] - Core - ACL hardening of com_joomlaupdate
The update server URL of comjoomlaupdate can be manipulated by non Super-Admin users...
CVE-2017-17544
CVE-2017-17544 describes a privilege-escalation in Fortinet FortiOS where authenticated admin users can elevate themselves to super_admin by restoring a modified configuration. Affected FortiOS versions include 6.0.0–6.0.6, 5.6.0–5.6.10, and 5.4 and earlier. Connected sources corroborate that the...
PT-2019-8247
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.4 and below Fortinet FortiOS versions 5.6.0 through 5.6.10 Fortinet FortiOS versions 6.0.0 through 6.0.6 Description A privilege escalation issue allows admin users to elevate their profile to super admin by restori...
CVE-2018-20162
Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root...
Super CMS suffers from a file upload vulnerability (CNVD-2019-10025)
Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and development of a set of products. Super CMS has a file upload vulnerability that can be exploited by attackers to upload malicious files, which can gain server...
File Upload Vulnerability in Super CMS
Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and development of a set of products. Super CMS has a file upload vulnerability that can be exploited by attackers to upload malicious w files and gain server privileges...
SQL Injection Vulnerability in Super CMS Frontend in***.php Page
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
SQL Injection Vulnerability in Super CMS Frontend lo***.php Page
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
File Upload Vulnerability in Super CMS Backend
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
Sql injection
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI...
CVE-2019-7585
CVE-2019-7585 affects Waimai Super Cms 20150505. The vulnerability is a time-based SQL Injection in web/Lib/Action/PublicAction.class.php via the array parameter passed to the /index.php?m=public&a=checkemail URI. In the NVD entry it shows high to critical impact depending on CVSS version (CVSS‑2...
CVE-2019-7569
An issue was discovered in DOYO aka doyocms 2.320140425 update. There is a CSRF vulnerability that can add a super administrator account via admin.php?c=aadminuser&a=add&run=1...
CVE-2019-7567
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...
Cross site scripting
An issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS via the username or password parameter...