Improper Access Control

librenms/librenms is vulnerable to improper access control. Missing to keep plugin admin pages to be within admin route and missing admin check/control allows an attacker to perform unauthorized access...

OpenCart Catalog Traversal Vulnerability

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A security vulnerability exists in the admin\model\catalog\download.php file in OpenCart 3.0.2.0 and earlier versions. An attacker can...

Cross site scripting

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account...

CVE-2017-11179

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account...