Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

182 matches found

RedhatCVE
RedhatCVE•added 2025/05/22 1:44 p.m.•15 views

CVE-2014-9242

SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

7.5CVSS8.8AI score0.02082EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE•added 2025/05/22 9:59 a.m.•14 views

CVE-2011-3385

Cross-site scripting XSS vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307...

4.3CVSS6AI score0.01342EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/05/22 6:2 a.m.•8 views

CVE-2011-4322

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

7.5CVSS7.2AI score0.01173EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/05/22 1:52 a.m.•13 views

CVE-2014-9243

Multiple cross-site scripting XSS vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to wb/admin/admintools/tool.php or 2 sectionid parameter to editmodulefiles.php, 3 news/addpost.php, 4 news/modifygroup.php, 5...

4.3CVSS6AI score0.0248EPSS
SaveExploits2References1
zdt
zdt•added 2023/07/04 12:0 a.m.•252 views

WebsiteBaker v2.13.3 - Stored XSS Vulnerability

Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...

7.1AI score
SaveExploits0
zdt
zdt•added 2023/07/04 12:0 a.m.•246 views

WebsiteBaker v2.13.3 - Directory Traversal Vulnerability

Exploit Title: WebsiteBaker v2.13.3 - Directory Traversal Application: WebsiteBaker Version: 2.13.3 Bugs: Directory Traversal Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm•added 2023/07/03 12:0 a.m.•198 views

WebsiteBaker 2.13.3 Cross Site Scripting

Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm•added 2023/07/03 12:0 a.m.•171 views

WebsiteBaker 2.13.3 Directory Traversal

Exploit Title: WebsiteBaker v2.13.3 - Directory Traversal Application: WebsiteBaker Version: 2.13.3 Bugs: Directory Traversal Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2023/07/03 12:0 a.m.•198 views

WebsiteBaker v2.13.3 - Stored XSS

Exploit Title: WebsiteBaker v2.13.3 - Stored XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author: Mirabbas Ağalarov...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB•added 2023/07/03 12:0 a.m.•225 views

WebsiteBaker v2.13.3 - Directory Traversal

Exploit Title: WebsiteBaker v2.13.3 - Directory Traversal Application: WebsiteBaker Version: 2.13.3 Bugs: Directory Traversal Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 26.06.2023 Author:...

5.3AI score
SaveExploits0
zdt
zdt•added 2023/04/10 12:0 a.m.•251 views

WebsiteBaker v2.13.3 - Cross-Site Scripting Vulnerability

Exploit Title: WebsiteBaker v2.13.3 - Cross-Site Scripting XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 02.04.2023 Author:...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm•added 2023/04/10 12:0 a.m.•253 views

WebsiteBaker 2.13.3 Cross Site Scripting

Exploit Title: WebsiteBaker v2.13.3 - Cross-Site Scripting XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 02.04.2023 Author:...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB•added 2023/04/08 12:0 a.m.•256 views

WebsiteBaker v2.13.3 - Cross-Site Scripting (XSS)

Exploit Title: WebsiteBaker v2.13.3 - Cross-Site Scripting XSS Application: WebsiteBaker Version: 2.13.3 Bugs: Stored XSS Technology: PHP Vendor URL: https://websitebaker.org/pages/en/home.php Software Link: https://wiki.websitebaker.org/doku.php/en/downloads Date of found: 02.04.2023 Author:...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB•added 2021/09/21 12:0 a.m.•520 views

WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)

Exploit Title: WebsiteBaker 2.13.0 - Remote Code Execution RCE Authenticated Date: 18-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://websitebaker.org/ Software Link: http://wiki.websitebaker.org/doku.php/en/downloads Version: 2.13.0 Category: Webapps Tested on:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm•added 2021/09/21 12:0 a.m.•231 views

WebsiteBaker 2.13.0 Remote Code Execution

Exploit Title: WebsiteBaker 2.13.0 - Remote Code Execution RCE Authenticated Date: 18-09-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://websitebaker.org/ Software Link: http://wiki.websitebaker.org/doku.php/en/downloads Version: 2.13.0 Category: Webapps Tested on:...

0.1AI score
SaveExploits0
zdt
zdt•added 2021/09/21 12:0 a.m.•208 views

WebsiteBaker 2.13.0 - Remote Code Execution (Authenticated) Exploit

Exploit Title: WebsiteBaker 2.13.0 - Remote Code Execution RCE Authenticated Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://websitebaker.org/ Software Link: http://wiki.websitebaker.org/doku.php/en/downloads Version: 2.13.0 Category: Webapps Tested on: Linux/Windows WebsiteBaker...

0.1AI score
SaveExploits0
OSV
OSV•added 2020/10/01 2:15 p.m.•11 views

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

9.8CVSS7.3AI score0.01668EPSS
SaveExploits3References2
NVD
NVD•added 2020/10/01 2:15 p.m.•17 views

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

9.8CVSS0.01668EPSS
SaveExploits3References2
Prion
Prion•added 2020/10/01 2:15 p.m.•21 views

Sql injection

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

7.5CVSS9.8AI score0.01668EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist•added 2020/10/01 1:57 p.m.•25 views

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

9.9AI score0.01668EPSS
SaveExploits3References2
Rows per page
Query Builder