CVE-2024-46475

CVE-2024-46475 is a reflected XSS vulnerability affecting Metronic Admin Dashboard Template v2.0 (homepage). The issue enables an attacker to execute arbitrary code in the context of a user’s browser by injecting a crafted payload. According to the CVSS metrics, the vulnerability has a base score...

Metronic Admin Dashboard Template 安全漏洞

Metronic Admin Dashboard Template is a responsive website backend administration template from Metronic based on the Bootstrap framework. A security vulnerability exists in Metronic Admin Dashboard Template version v2.0, which stems from the presence of a Reflective Cross-Site Scripting XSS...

Responsive Binary mlm 3.2.0 SQL Injection

==================================================================================================================================== | Title : Responsive Binary mlm 3.2.0 Auth By PAss Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits...

Emergency Ambulance Hiring Portal 1.0 SQL Injection

==================================================================================================================================== | Title : Emergency Ambulance Hiring Portal 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

Vaultwarden (formerly Bitwarden_RS) 1.30.3 contains a stored XSS/HTML-injection vulnerability in the admin dashboard. The attack requires authentication and could let an attacker inject code rendered in an administrator’s browser, though the default CSP mitigates many exploitation paths. The issu...

PT-2024-28738 · Unknown · Vaultwarden

Name of the Vulnerable Software and Affected Versions: Vaultwarden formerly Bitwarden RS version 1.30.3 Description: A stored cross-site scripting XSS or HTML injection issue has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code int...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-40480

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access...

Online Exam System 安全漏洞

Online Exam System is an online exam system by oretnom23 individual developers. A security vulnerability exists in Online Exam System v1.0, which originated when the /admin/update.php and /admin/dashboard.php pages were found to contain an access control vulnerability...

PT-2024-28867 · Unknown · Kashipara Online Exam System

Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Broken Access Control issue was found in "admin/update.php" and "admin/dashboard.php", allowing remote unauthenticated attackers to view the administrator dashboard and delete valid user...

CVE-2024-41246

An Incorrect Access Control vulnerability was found in /smsa/admindashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view administrator dashboard...

PT-2024-29324 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/admin dashboard.php endpoint, allowing remote unauthenticated attackers to view the administrator dashboard due to incorrect access...

Kashipara Responsive School Management System 安全漏洞

Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System version v3.2.0, which stems from an incorrect access control vulnerability contained in the /smsa/admindashboard.php file...

CVE-2024-38725

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webstix Admin Dashboard RSS Feed allows Stored XSS.This issue affects Admin Dashboard RSS Feed: from n/a through 3.1...

CVE-2024-38725 WordPress Admin Dashboard RSS Feed plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webstix Admin Dashboard RSS Feed allows Stored XSS.This issue affects Admin Dashboard RSS Feed: from n/a through 3.1...

CVE-2024-38725

CVE-2024-38725 describes a stored XSS vulnerability in the WordPress Admin Dashboard RSS Feed plugin. The issue arises from improper input neutralization during web page generation, allowing stored scripts to execute in the context of affected pages. The vulnerability affects Admin Dashboard RSS ...