CVE-2025-6936

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /addpro.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-48758

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code...

CVE-2024-48758

dingfanzu CMS V1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within the doAdminAction.php component, specifically affecting the addPro parameter. A remote attacker can exploit this vulnerability to perform unauthorized actions and execute arbitrary code . As a temporary workaround...

PT-2024-33202 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF that allows a remote attacker to execute arbitrary code via the addPro parameter of the doAdminAction.php component. This enables unauthorized actions...