Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-112026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the...

6.3CVSS4.5AI score0.00202EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/19 12:30 a.m.•18 views

EUVD-2026-104007

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS4.3AI score0.00202EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/18 11:16 p.m.•22 views

CVE-2026-112026

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS0.00202EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/18 10:15 p.m.•10 views

CVE-2026-112026 light0011 cms UserModel.class.php sha1 weak password hash

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS4.7AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/18 10:15 p.m.•25 views

CVE-2026-112026

The light0011 cms is vulnerable due to the use of the sha1 function in the file App/Home/Model/UserModel.class.php. Specifically, manipulating the Password argument results in a password hash generated with insufficient computational effort (CWE-916, CWE-326). This vulnerability can be triggered ...

6.3CVSS4.3AI score0.00202EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/18 10:15 p.m.•38 views

CVE-2026-112026 light0011 cms UserModel.class.php sha1 weak password hash

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS0.00202EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•17 views

CVE-2026-112026: Use of Password Hash With Insufficient Computational Effort

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS4.3AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•11 views

PT-2026-117159

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

6.3CVSS4.3AI score0.00202EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/10/17 4:00 p.m.•9 views

light0011 CMS encryption issue vulnerability

Light0011 CMS has a vulnerability related to encryption. This vulnerability stems from improper handling of the parameter "Password" in the sha1 function used in the file App/Home/Model/UserModel.class.php. As a result, the strength of password hashing is insufficient, and it could be exploited b...

6.3CVSS5.4AI score0.00202EPSS
SaveExploits0References6
NVD
NVD
•added 2019/07/25 4:15 p.m.•41 views

CVE-2019-14266

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

8.8CVSS9.2AI score0.01269EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/07/25 3:07 p.m.•54 views

CVE-2019-14266

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

9.2AI score0.01269EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/25 12:00 a.m.•12 views

CVE-2019-14266: Improper Neutralization of Special Elements used in an SQL Command

OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php...

8.8CVSS5.8AI score0.01269EPSS
SaveExploits1References2
Rows per page
Query Builder