CVE-2023-41005

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php...

Privilege Escalation

pimcore/pimcore is vulnerable to Privilege Escalation . The vulnerability exits due to faulty logic in the updateAction function of UserController.php, which allows a low level user to elevate their privileges to an admin...

CMSWing SQL Injection Vulnerability (CNVD-2021-09500)

CMSWing is a ThinkJS-based e-commerce platform and CMS builder. CMSWing 1.3.8 suffers from a SQL injection vulnerability. The vulnerability stems from the updateAction function not checking the detail parameter. An attacker can exploit this vulnerability to execute arbitrary SQL commands via...

Sql injection

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

CVE-2020-20295

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

CVE-2020-20295: Improper Neutralization of Special Elements used in an SQL Command

An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parameters can execute arbitrary SQL commands...

PT-2021-10475

Name of the Vulnerable Software and Affected Versions: CMSWing version 1.3.8 Description: An issue was found in the CMSWing project where the updateAction function does not check the detail parameter, allowing malicious parameters to execute arbitrary SQL commands. Recommendations: For CMSWing...