CXUUCMS Cross-Site Scripting Vulnerability

CxuuCms is an easy-to-use, open source PHP+Mysql based content management system. A cross-site scripting vulnerability exists in CXUUCMS V3. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the first and third input fields of /public/admin.php...

PT-2020-13862 · Codiad · Codiad

Name of the Vulnerable Software and Affected Versions: Codiad versions 1.7.8 and later Description: A Server-Side Request Forgery SSRF issue was found in the software. It allows a user with admin privileges to use the plugin install feature to make the server request any URL via...

CVE-2020-10499

CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request...

CVE-2020-10488

CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request...

FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin) Vulnerability

Exploit for php platform in category web applications...

@peak-stone/vue-admin (>=1.0.1 <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (=1.0.0)

assign-deep NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

Simple Online Hotel Reservation System - Cross-Site Request Forgery (Delete Admin) Vulnerability

Exploit for php platform in category web applications Exploit Title: Simple Online Hotel Reservation System - Cross-Site Request Forgery Delete Admin Exploit Author: Mr Winst0n Author E-mail: [email protected] Vendor Homepage: https://code-projects.org/ Software Link :...

Pluck Cross-Site Request Forgery Vulnerability

Pluck is a content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in Pluck version 4.7.9-dev1. A remote attacker can exploit this vulnerability by deleting an image with /admin.php?action=deleteimage&var1= URI...

CVE-2019-3584

Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 18.11.31.62 allows authenticated administrator users -- administrators to Remove MVision Endpoint via unspecified vectors...

WordPress Social Pug - Easy Social Share Buttons Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Social Pug-Easy Social Share Buttons Plugin is used in one of the social platform sharing plugin. A cross-site scriptin...

alo7-airflow (>=1.10.0 <=1.10.0.7), autologin (>=0.1.1 <=0.1.3) +3 more potentially affected by CVE-2018-16516 via flask-admin (>=1.4.0 <=1.5.2)

flask-admin PYPI version =1.4.0, =1.10.0, =0.1.1, =0.6.7.post3, =4.2.6, =0.1.0, =0.2.0 Source cves: CVE-2018-16516 Source advisory: OSV:GHSA-894G-6J7Q-2HX6...

CVE-2018-16633

Pluck v4.7.7 allows XSS via the admin.php?action=editpage&page= page title...

Cross site scripting

An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5...

zzcms SQL Injection Vulnerability (CNVD-2018-26017)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/specialadd.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of zxbigclass...

OTCMS cross-site scripting vulnerability (CNVD-2018-19093)

OTCMS is an article-based web content management system CMS. A cross-site scripting vulnerability exists in the admin/users.php file in OTCMS version 3.61, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'dataTypeCN', 'dataMode' and...

CVE-2018-17134

admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfgauthor field in conjunction with a crafted cfgwebpath field...

Cross site request forgery (csrf)

Frog CMS 0.9.5 has admin/?/user/edit/1 CSRF...

CVE-2018-12256

admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 allows remote authenticated attackers to upload a malicious file resulting in remote code execution by using the text/xml or application/xml Content-Type in a publichtml/admin/?app=vqmods&doc=vqmods request...

Dotclear admin/users.php file cross-site scripting vulnerability

Dotclear is a software developer Olivier Meunier developed a free PHP and MySQL-based blog Blog publishing software. A cross-site scripting vulnerability exists in the admin/users.php file in Dotclear version 2.12.1. A remote attacker can exploit this vulnerability by injecting arbitrary web scri...

ufscar.br XSS vulnerability

Vulnerable URL: http://www.ufscar.br/forplad/admin////alteratranslado.php?email=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 36895 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...