PT-2026-46219

A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PHP/objects/updates/add post.php. Performing a manipulation of the argument up file to post results in unrestricted upload. The attack may be initiated remotely. The exploit has...

PT-2024-25262

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description An issue in the software allows a remote attacker to execute arbitrary code via the "add post.php" component. Recommendations For flusity-CMS version 2.33, consider disabling access to the "add post.php"...

PT-2022-20327

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection, which can be exploited via the "/admin/add post.php" API endpoint. This allows for potential unauthorized access to database information. Recommendations For elitecms version...

PT-2022-18387

Name of the Vulnerable Software and Affected Versions Social Codia SMS version 1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field in add post.php. This enables the execution of malicious code, potentially...

PT-2022-18200

Name of the Vulnerable Software and Affected Versions AeroCMS version 0.0.1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field in add post.php. This enables the execution of malicious code on the web...

PT-2021-16455

Name of the Vulnerable Software and Affected Versions: Victor CMS version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to the /admin/includes/admin add post.php endpoint. This is due to an arbitrary file upload vulnerability. Recommendations: For Victo...