SeaCMS command injection vulnerability

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A command injection vulnerability exists in SeaCMS v13.1, which stems from an arbitrary command execution vulnerability in the adminip.p...

CVE-2024-8222

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file /admin/?page=musics/managemusic. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

PT-2024-38881 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical vulnerability has been found in SourceCodester Music Gallery Site. This affects an unknown part of the file /admin/?page=musics/manage music. The manipulation of the id...

ClassCMS security vulnerabilities

ClassCMS is a simple, flexible, secure and easy-to-expand content management system from China ClassCMS open source. A security vulnerability exists in ClassCMS version 4.8, which originates from the parameter Title in the file /index.php/admin can lead to cross-site scripting...

CVE-2024-42776

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of the cross-site request forgery vulnerability , the vulnerability stems from admin/adminpage.php?linkid=1&mode=delete does not adequately verify that the request is from a trusted user , an attack...

CVE-2024-42608

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/submitpage.php...

CVE-2024-42605

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/editpage.php?linkid=1...

PT-2024-30064 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF in Pligg CMS. This occurs via the admin/admin page.php endpoint with specific parameters: link id and mode. The link id is set to 1 and the mode is...

Yoga Class Registration System SQL注入漏洞

Yoga Class Registration System is a yoga class registration system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Yoga Class Registration System version 1.0, which originates from an unknown function in the file /admin/?page=categories/viewcategory, where...

CVE-2024-7853: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Yoga Class Registration System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=categories/viewcategory. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

Covid-19 Contact Tracing System 1.0 Cross Site Scripting

============================================================================================================================================= | Title : Covid-19 Contact Tracing System 1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3...

PT-2024-38630

Name of the Vulnerable Software and Affected Versions SourceCodester Yoga Class Registration System version 1.0 Description A critical issue has been found in the system, affecting an unknown function of the file /admin/?page=categories/view category. The manipulation of the id argument leads to...

CVE-2024-42624

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

CVE-2024-42632

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/add...

CVE-2024-42629

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/edit/10...

FrogCms 安全漏洞

FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /page/add was found to contain a cross-site request forgery vulnerability...

CVE-2024-42629

CVE-2024-42629 affects FrogCMS v0.9.5, exposing a Cross-Site Request Forgery (CSRF) vulnerability via the admin endpoint /admin/?/page/edit/10. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE list, PT Security enrichment). The most actionable mitigation noted in the co...

CVE-2024-42623

CVE-2024-42623 affects FrogCMS v0.9.5 with a Cross-Site Request Forgery (CSRF) vulnerability at the /admin/?/layout/delete/1 endpoint. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, and no privileges required, but user interaction is required; impact is h...

CVE-2024-42631

FrogCMS v0.9.5 contains a Cross-Site Request Forgery (CSRF) flaw exploitable via the admin path /admin/?/layout/edit/1. The Red Hat/NVD/CVE records confirm the vulnerability in FrogCMS 0.9.5 with high impact (C/H/I/A) and user interaction required. The connected documents provide the vulnerabilit...