5127 matches found
Blind Stored XSS in admin panel (open question page)
Description Blind stored XSS via any unauthorized or anonymous visitor user without any privileges can inject XSS payload in "Add question" page in "Your Name" input field then it will be executed in admin panel in Open Question page Proof of Concept...
188Jianzhan 跨站脚本漏洞
Liaoning Vtime Technology 188Jianzhan Demon Baba website builder is an open source website builder from China's Liaoning Vtime Technology Liaoning Vtime Technology. A security vulnerability exists in 188Jianzhan version 2.10. An attacker can exploit this vulnerability to execute arbitrary code vi...
CVE-2022-45275
An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=savesettings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-44361
An issue was discovered in ZZCMS 2022. There is a cross-site scripting XSS vulnerability in admin/adlist.php...
CVE-2022-44212
In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...
CVE-2022-44212
In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...
PT-2022-27143 · Gl.Inet · Gl.Inet Goodcloud
Name of the Vulnerable Software and Affected Versions: GL.iNet Goodcloud version 1.0 Description: The issue is related to an insecure design in the software, which allows a remote attacker to access the devices' admin panel. Recommendations: For GL.iNet Goodcloud version 1.0, consider restricting...
CVE-2022-44212
CVE-2022-44212 affects GL.iNet Goodcloud 1.0. The vulnerability is described as an insecure design that allows a remote attacker to access the device management/admin panel. The cited metrics from NVD indicate a CVSS v3.1 base score of 5.9 (Medium) with Network attack vector, high attack complexi...
CVE-2022-44212
In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...
CVE-2022-44212
In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...
CVE-2022-44097
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-44096
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-44097
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-44096
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
Hardcoded credentials
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
Hardcoded credentials
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-45328
Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...
PT-2022-27109 · Unknown · Book Store Management System
Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue concerns hardcoded credentials in the system, allowing attackers to escalate privileges and access the admin panel. Recommendations: For Book Store Management System version 1.0,...
CVE-2022-44097
CVE-2022-44097 affects Book Store Management System v1.0. The vulnerability arises from hardcoded credentials in the system, enabling attackers to escalate privileges and gain access to the admin panel. This is supported by multiple connected sources (RH Red Hat, NVD, CNNVD and others) describing...