CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Cross site scripting

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

Barebones CMS Cross-Site Scripting Vulnerability

Barebones CMS is an open source software from Barebones CMS, Inc. A cross-site scripting vulnerability exists in Barebones CMS version v2.0.2, which stems from a cross-site scripting vulnerability in user interaction with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

CVE-2023-36211

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting XSS when an authenticated user interacts with certain features on the admin panel...

MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open...

MAL-2023-8007 Malicious code in @rocketrefer/admin-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cee4d7f564848bd4bb2a8a410f60f22ce1bce642072b14a97281130483c8c1a9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Daimler Truck: Blind xss at https://homologation.omniplus.com/

Hello team, I have found a blind xss leads to admin panel exposed with cookie StepToReproduce 1- Navigate to https://homologation.omniplus.com/ 2- You will face a submit form contains 6 pages 3- At each input field you have to put your blind xss payload , for me I used xss.report just go there an...

xForUp Simple File Uploader 1.0 SQL Injection

==================================================================================================================================== | Title : xForUp simple file uploader V1.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro | | Vendor :...

Job Portal CMS 2.3.0.2 SQL Injection

==================================================================================================================================== | Title : Job Portal CMS V2.3.0.2 Sql Injection Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 Français V.Pro | | Vendor ...

CMSgrafia 7 SQL Injection

====================================================================================================================================== | Title : CMSgrafia v7 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 61.0.1 32-bit | |...

GHSA-9436-3GMP-4F53 grav Server-side Template Injection (SSTI) mitigation bypass

Summary The fix for SSTI using |map, |filter and |reduce twigs implemented in the commit 71bbed1 introduces bypass of the denylist due to incorrect return value from isDangerousFunction, which allows to execute the payload prepending double backslash \ Details The isDangerousFunction check in...

Finounce 1.0 Cross Site Scripting

Exploit Title: Finounce 1.0 - Stored XSS Exploit Author: CraCkEr Date: 12/07/2023 Vendor: Bug Finder Vendor Homepage: https://bugfinder.net/ Software Link: https://bugfinder.net/product/finounce-an-advance-peer-to-peer-crypto-exchange-platform/20 Tested on: Windows 10 Pro Impact: Manipulate the...

CVE-2023-37627

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc...

PT-2023-26048 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: Code-projects Online Restaurant Management System version 1.0 Description: The issue allows an attacker to perform SQL injection, which can be used to bypass the admin panel. This enables the attacker to view order records, add items, and...

CVE-2023-37627

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc...

CVE-2023-27225

A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...

CVE-2023-27225

A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...