2394 matches found
Code injection
Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page...
CVE-2023-37150
Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting XSS vulnerability in "/admin/index.php?page=categories" Category item...
CVE-2023-36992
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...
CVE-2023-36992
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...
Code injection
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...
CVE-2023-36992
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...
PT-2023-25764 · Travianz · Travianz
Name of the Vulnerable Software and Affected Versions: TravianZ versions 8.3.3 through 8.3.4 Description: The issue allows remote attackers to execute PHP code through PHP injection in the config editor on the admin page. Recommendations: For versions 8.3.3 and 8.3.4, consider disabling the confi...
CVE-2023-36992
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code...
The vulnerability of the admin/?page=items/view_item component in the Web Application SourceCodester Lost and Found Information System allows a malicious user to execute arbitrary SQL queries.
The vulnerability of the “admin/?page=items/viewitem” component in the Web application of the SourceCodester Lost and Found Information System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execu...
CVE-2023-36291
Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the fcontent parameter in the admin/pagenew file...
CVE-2023-36291
Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the fcontent parameter in the admin/pagenew file...
Maxsite CMS 跨站脚本漏洞
MaxSite CMS is a Russian MaxSite CMS open source project of a web content management system . A security vulnerability exists in Maxsite CMS version v.108.7, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the fconte...
PT-2023-24987 · Unknown · Campcodes Retro Cellphone Online Store
Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A critical issue was found in the software, affecting an unknown function of the file /admin/edit product.php. The manipulation of the username argument leads to sql injection. I...
CVE-2023-33592
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=systeminfo/contactinformation...
CVE-2023-33592
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=systeminfo/contactinformation...
PT-2023-24399 · Unknown · Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the component /php-lfis/admin/?page=system info/contact information. Recommendations: For Lost and Found Information...
CVE-2020-18416
An cross site request forgery CSRF vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information...
WooCommerce Product Vendors < 2.1.77 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open a page with the code below html alert/XSS/" /...