2594 matches found
Police Crime Record Management System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Exploit Title: Police Crime Record Management System 1.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 12/08/2021 Exploit Author: Ömer Hasan Durmuş Software Link: https://www.sourcecodester.com/php/14894/police-crime-record-management-system.html Version: v1.0 Category: Webapps Tested on:...
Police Crime Record Management System 1.0 Cross Site Scripting
Exploit Title: Police Crime Record Management System 1.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 12/08/2021 Exploit Author: Ömer Hasan Durmuş Software Link: https://www.sourcecodester.com/php/14894/police-crime-record-management-system.html Version: v1.0 Category: Webapps Tested on:...
CVE-2020-18460
Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...
CVE-2020-18458
Cross Site Request Forgery CSRF vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd...
CVE-2020-18458
Cross Site Request Forgery CSRF vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd...
CVE-2020-18460
Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...
CVE-2020-18457
Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...
CVE-2020-18460
711cms v1.0.7 is vulnerable to Cross Site Request Forgery (CSRF). The issue allows an attacker to cause the application to add an admin account via the endpoint admin.php?c=Admin&m=content. The provided connected records confirm the affected product/version and the vulnerable operation, with CSRF...
CVE-2020-18460
Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...
CVE-2020-18458
Cross Site Request Forgery CSRF vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd...
CVE-2020-18458
CSRF vulnerability in DamiCMS v6.0.6 allows an attacker to add an admin account via admin.php?s=/Admin/doadd. The issue is documented as CVE-2020-18458 with NVD metrics CVSS v2 base score 6.0 (medium) and CVSS v3.1 base score 8.0 (high). Exploitation status is not provided in the connected docume...
CVE-2020-18457
Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...
CVE-2020-18457
CVE-2020-18457 affects bycms v1.3.0 and is a CSRF vulnerability that allows an attacker to add an administrator account via admin.php/ucenter/add.html. The issue is rooted in CSRF and enables privilege escalation to admin, with impact described in CVSS as enabling partial confidentiality, integri...
bycms 跨站请求伪造漏洞
bycms is a simple, easy-to-use content management system. bycms v1.3.0 has a cross-site request forgery vulnerability, an attacker can add an administrator account via admin.php/ucenter/add.html...
PT-2021-10761 · Npm · Express-Cart
Name of the Vulnerable Software and Affected Versions: Express cart versions 1.1.10 and earlier Express cart version 1.1.16 Description: A Cross Site Request Forgery CSRF issue allows attackers to add an administrator account, add a discount code, or have other unspecified impacts. This issue...
Improper Privilege Management in amirsanni/mini-inventory-and-sales-management-system
💥 BUG unprivileged user can add item 💥 STEP TO REPDOUCE 1. From admin account goto https://1410inc.xyz/mini-inventory-and-sales-management-system/administrators and add new user callled user-B with basic role .\ So, user-B cant add new item.\ 2. Now goto user-B account and here user-B cant see...
Cross-Site Request Forgery (CSRF)
thinkcmf/thinkcmf is vulnerable to cross-site request forgery CSRF. The application did not verify the authenticity of web requests, allowing an attacker to modify an admin account on behalf of the authenticated user by tricking the victim into visiting a malicious web site...