6111 matches found
CVE-2024-49587 Glutton V1 endpoints missing authentication
Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...
CVE-2025-58950
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Lione lione allows PHP Local File Inclusion.This issue affects Lione: from n/a through = 1.16...
Code-Projects Simple Stock System 安全漏洞
Code-Projects Simple Stock System is a simple stock system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Stock System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /market/signup.php, which could lead to an...
Code-Projects Scholars Tracking System SQL注入漏洞
Code-Projects Scholars Tracking System is an open source scholars tracking system by Code-Projects. A SQL injection vulnerability exists in Code-Projects Scholars Tracking System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /deletepost.php, which could lead...
CodeAstro Real Estate Management System SQL注入漏洞
CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which stems from incorrect manipulation of parameters in the file /admin/userbuilderdelete.php, which could lead ...
CodeAstro Real Estate Management System SQL注入漏洞
CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/userdelete.php, which could lead t...
Code-Projects Scholars Tracking System SQL注入漏洞
Scholars Tracking System is a scholars tracking system. Scholars Tracking System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter ID in file /admin/deleteuser.php. An attacker can exploit this vulnerability to...
PT-2025-52487
Name of the Vulnerable Software and Affected Versions Glutton V1 affected versions not specified Description The Glutton V1 service had exposed endpoints on Gotham stacks without authentication. This allowed users without proper permissions to directly access the Glutton backend, potentially...
CVE-2025-58948
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Aromatica aromatica allows PHP Local File Inclusion.This issue affects Aromatica: from n/a through = 1.8...
CVE-2025-58944
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Manufactory manufactory allows PHP Local File Inclusion.This issue affects Manufactory: from n/a through = 1.4...
CVE-2025-58950
CVE-2025-58950 concerns the WordPress Lione theme (versions <= 1.16). Affected component: Lione theme’s PHP code handling include/require statements. Root cause: improper control of filenames enabling a PHP Local File Inclusion vulnerability (described as a PHP Remote File Inclusion issue in s...
CVE-2025-58930 WordPress FitFlex theme <= 1.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes FitFlex fitflex allows PHP Local File Inclusion.This issue affects FitFlex: from n/a through = 1.6...
CVE-2025-58927 WordPress Stallion theme <= 1.17 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Stallion stallion allows PHP Local File Inclusion.This issue affects Stallion: from n/a through = 1.17...
CVE-2025-58894
CVE-2025-58894 affects the WordPress-related Good Mood theme (axiomthemes Good Mood) up to version 1.16. The issue is improper control of filenames for include/require statements, enabling PHP Local File Inclusion via a PHP Remote File Inclusion vector. Affected products: Good Mood theme versions
CVE-2025-58889
Summary: CVE-2025-58889 affects the WordPress Towny theme (versions prior to 1.17). The root cause is improper control of filenames in include/require statements, enabling a PHP Local File Inclusion (LFI) vulnerability. Affected component: Towny plugin/theme code for WordPress. Impact: potential ...
CVE-2025-58885
CVE-2025-58885 concerns WordPress Pathfinder theme (Pathfinder) versions through 1.16. The vulnerability is Local File Inclusion enabled by improper control of filenames for include/require statements, effectively a PHP Local File Inclusion via an improper filename check. Affected product: Ancora...
CVE-2025-53453 WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through = 1.16...
CVE-2025-53447 WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Assembly assembly allows PHP Local File Inclusion.This issue affects Assembly: from n/a through = 1.1...
CVE-2025-53443 WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Smash smash allows PHP Local File Inclusion.This issue affects Smash: from n/a through = 1.7...
