Money Transfer Management System SQL注入漏洞

A SQL injection vulnerability exists in Money Transfer Management System version 1.0, a money transfer management system. The vulnerability stems from missing validation of external input SQL statements in the id parameter in admin/maintenance/managebranch.php and admin/maintenance/managefee.php...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs...

BlogoText 'creer_fichier_zip' function information disclosure vulnerability

BlogoText is a lightweight SQLite blogging engine. An information disclosure vulnerability exists in the 'creerfichierzip' function in the admin/maintenance.php file in BlogoText 3.7.6 and earlier versions. A remote attacker can exploit this vulnerability by providing the name archiv1.zip to brea...