Lucene search
+L

30 matches found

CNNVD
CNNVD
added 2024/08/29 12:0 a.m.6 views

FeehiCMS 代码问题漏洞

FeehiCMS is a Php based CMS website builder by Liufee personal developer. A code issue vulnerability exists in FeehiCMS version 2.1.1 and prior versions, which originates from an unverified file upload vulnerability in the Useravatar parameter of the /admin/index.php?r=user%2Fcreate file...

9.8CVSS6.5AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/27 12:0 a.m.11 views

PT-2024-37725

Name of the Vulnerable Software and Affected Versions Campaign Monitor for WordPress plugin for WordPress versions up to, and including, 2.8.15 Description The issue is due to the plugin not properly restricting direct access to "/forms/views/admin/create.php" and display errors being enabled. Th...

5.3CVSS5.2AI score0.00849EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.8 views

Tourism Management System 安全漏洞

Tourism Management System is an American website builder for tourism management. A security vulnerability exists in Phpgurukul Tourism Management System version v2.0, which originates from a file upload vulnerability in tms/admin/create-package.php...

8.8CVSS6.9AI score0.00758EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.5 views

CVE-2021-43724

A Cross Site Scripting XSS vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file...

4.8CVSS5.8AI score0.00494EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/17 8:15 p.m.6 views

CVE-2020-28136

An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page...

8.8CVSS7.8AI score0.02941EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.9 views

SourceCodester Tourism Management System 代码问题漏洞

SourceCodester Tourism Management System is a website builder for tourism management from SourceCodester. SourceCodester Tourism Management System has an arbitrary file upload vulnerability that can be exploited for remote code execution via the admin create-package.php vulnerability page...

8.8CVSS7.9AI score0.02941EPSS
SaveExploits1References3
OSV
OSV
added 2019/04/30 7:29 p.m.5 views

CVE-2018-15206

BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf...

8.8CVSS5.8AI score0.00636EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/25 12:0 a.m.6 views

BageCMS Cross-Site Request Forgery Vulnerability

BageCMS is a cross-platform content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the index.php?r=admini/admin/create URL in BageCMS version 3.1.3. A remote attacker can exploit the vulnerability to add a backend administrator account...

8.8CVSS8.8AI score0.00523EPSS
SaveExploits1References1
NVD
NVD
added 2018/07/24 4:29 p.m.16 views

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

8.8CVSS8.6AI score0.00523EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/07/24 4:0 p.m.23 views

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

8.6AI score0.00523EPSS
SaveExploits1References1
Rows per page
Query Builder