CVE-2021-27730

Accellion FTA 912432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA912444 and later...

CVE-2025-4868 merikbest ecommerce-spring-reactjs File Upload Endpoint admin path traversal

A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v1/admin/ of the component File Upload Endpoint. The manipulation of the argument...

CVE-2025-4176

A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiate...

📄 Smart Manager 8.27.0 SQL Injection

Smart Manager version 8.27.0 suffers from a remote SQL injection vulnerability. Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...

Smart Manager 8.27.0 - Post-Authenticated SQL Injection

Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link: https://www.storeapps.org/product/smart-manager/ Version: 8.27.0 Tested on: Ubuntu 22.04 CVE: CVE-2024-0566 SQ...

CVE-2025-3591

A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

SQL Injection

Overview pimcore/customer-management-framework-bundle is a Customer Management Framework for management of customer data within Pimcore. Affected versions of this package are vulnerable to SQL Injection via the filterDefinition or filter parameter at the...

PT-2025-4751 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy versions 1.11 and earlier Description: The issue allows for CSRF, enabling account takeover via POST "/api/user/admin". This can be exploited to gain unauthorized access to user accounts. Recommendations: For versions 1.11 and earlier, ...

Cross-site Scripting (XSS)

Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS by an admin user who uploads a malicious backup file using the restore functionality at the /admin/module/view?type=adminbackup endpoint. The...

Exploit for Cross-site Scripting in Microweber

CVE-2024-33299 Stored Cross Site Scripting vulnerability in Mi...

PT-2024-17877 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A vulnerability has been found in the code-projects Chat System. The issue affects an unknown function of the file /admin/update room.php of the component Chat Room Page. The manipulation of...

PT-2024-17836 · Code Projects · Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue has been found in the Hospital Management System, affecting some unknown functionality of the file /admin/index.php of the component Login. The manipulation of...

PT-2024-36482 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: The issue is related to multiple SQL injection vulnerabilities found in the /admin/add-nurse.php component of the system. These vulnerabilities can be exploited via the gender and emailid...

PT-2024-17707 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: ClassCMS versions up to 4.8 Description: A critical issue has been found in the User Management Page component, specifically affecting an unknown functionality of the file "/admin?do=admin:user:editPost". This issue leads to improper handling...

PT-2024-36478 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Nurse Hiring System version 1.0 Description: A SQL injection issue was found in the /admin/index.php endpoint of the phpgurukul Online Nurse Hiring System, allowing remote attackers to execute arbitrary SQL commands and gain...

PT-2024-36428 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Nurse Hiring System version 1.0 Description: A SQL injection issue was found in the /admin/password-recovery.php endpoint via the mobileno parameter. This allows for potential exploitation of the system. Recommendations: For...

PT-2024-36452 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-learning Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability in the /admin/delete class.php endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations:...

CVE-2024-53255 Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS

BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting XSS vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to...

PT-2024-16852 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2023 Description: A critical issue affects some unknown functionality of the file /admin/ad list.php?action=pass of the component Keyword Filtering. The manipulation of the keyword argument leads to SQL injection. The attack may...