CVE-2023-38829

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface...

CVE-2022-1599

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status draft, published, slug, post date, comment status enabled,...

CVE-2022-1599 Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status draft, published, slug, post date, comment status enabled,...

CVE-2022-1599

The CVE-2022-1599 entry concerns the WordPress plugin Admin Management Xtended (before 2.4.5). The vulnerability arises from missing CSRF checks in several AJAX actions, allowing an attacker with a logged-in user with sufficient capabilities to trigger actions such as changing post status (draft/...

WordPress plugin Admin Management Xtended 跨站请求伪造漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. Xtend and others are products of the Eclipse Foundation. Xtend is a general-purpose high-level programming language for the Java Virtual Machine. WordPress...

CVE-2022-29450

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

CVE-2022-29450

CVE-2022-29450 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the WordPress Admin Management Xtended plugin,

CVE-2022-29450 WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

CVE-2022-29450 WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

WordPress plugin Admin Management Xtended 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WorWordPress Admin Management Xtended plugin 2.4.4 and earlier versions are vulnerable to cross-site request...

PT-2022-19625 · Unknown · Admin Management Xtended

Name of the Vulnerable Software and Affected Versions: Admin Management Xtended plugin versions = 2.4.4 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...

FUDForum 代码问题漏洞

FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...

CVE-2022-32026

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...

Online Car Wash Booking System SQL注入漏洞

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=user/ manageuser&id=page lacks validation of external input SQL statements,...

CVE-2022-29450

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Admin Management Xtended plugin = 2.4.4 at WordPress...

WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress Admin Management Xtended plugin versions = 2.4.4. Solution Update the WordPress Admin Management Xtended plugin to the latest available version at least 2.4.5...

CVE-2022-23887

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

CVE-2020-11983

An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks...

Cross site scripting

An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks...