114 matches found
EUVD-2026-71014
phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data upda...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
PT-2026-20215
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
The phpgurukul Gym Management System 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to the absence of Anti-CSRF tokens . This flaw specifically affects the /profile.php endpoint within the User Panel's profile update functionality. An attacker can exploit this vulnerability t...
PHPGurukul Gym Management System 安全漏洞
PHPGurukul Gym Management System is a gym management system developed by PHPGurukul Inc. Version 1.0 of the PHPGurukul Gym Management System has a security vulnerability. This vulnerability stems from the cross-site request forgery feature in the user panel configuration file update function, whi...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2018-10135
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
EUVD-2018-2213
Malware in sbrugna...
EUVD-2018-3409
Malware in sbrugna...
EUVD-2018-3501
Malware in sbrugna...
EUVD-2017-9073
Malware in sbrugna...
EUVD-2018-3385
Malware in sbrugna...
EUVD-2018-3408
Malware in sbrugna...
EUVD-2025-14656
Malicious code in bioql PyPI...
CVE-2025-5544
A vulnerability was found in aaluoxiang oasystem up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. It has been rated as problematic. Affected by this issue is the function image of the file src/main/java/cn/gson/oasys/controller/user/UserpanelController.java. The manipulation leads to path traversa...