CVE-2024-27626

A Reflected Cross-Site Scripting XSS vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel...

CVE-2024-27626

A Reflected Cross-Site Scripting XSS vulnerability has been identified in Dotclear version 2.29. The flaw exists within the Search functionality of the Admin Panel...

CVE-2024-27626

CVE-2024-27626 affects Dotclear 2.29, with a Reflected Cross-Site Scripting (XSS) issue in the Admin Panel Search function. The CVE entry lists CVSSv3.1 metrics: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (base score 6.1, MEDIUM). Impact is limited to confidentiality and integrity (LOW) with no availabi...

GL.iNet AR300M v4.3.7 Arbitrary File Read Exploit

!/usr/bin/env python3 Exploit Title: GL.iNet = 4.3.7 Arbitrary File Write Google Dork: intitle:"GL.iNet Admin Panel" Date: XX/11/2023 Exploit Author: Michele 'cyberaz0r' Di Bonaventura Vendor Homepage: https://www.gli-net.com Software Link:...

Zoo Management System /zms/admin/changeimage.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System has a SQL injection vulnerability that originates from a SQL injection vulnerability in the editid parameter of the /zms/admin/changeimage.php file, no details of the vulnerability are available at this time...

Access Control Bypass

mezzanine is vulnerable to an Access Control Bypass. The vulnerability is caused by a crafted request to the admin panel allowing unauthorized individuals to bypass restrictions and potentially gain unauthorized access...

Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

GHSA-QP56-82VP-XQGV Mezzanine allows attackers to bypass access control mechanisms

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

CVE-2024-25169

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

Design/Logic Flaw

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

PT-2024-20797

Name of the Vulnerable Software and Affected Versions Mezzanine version 6.0.0 Description An issue in Mezzanine allows attackers to bypass access control mechanisms in the admin panel via a crafted request. Recommendations For Mezzanine version 6.0.0, consider restricting access to the admin pane...

CVE-2024-25169

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

CVE-2024-25169

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

CVE-2024-25169

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request...

Mezzanine Security Breach

Github Mezzanine is a powerful, consistent and flexible content management platform. A security vulnerability exists in Mezzanine version v6.0.0, which stems from a vulnerability that allows an attacker to bypass the access control mechanism in the admin panel via a specially crafted request...

CVE-2024-25169

The CVE-2024-25169 issue affects Mezzanine v6.0.0, where an attacker can bypass admin-panel access controls through a crafted request, as reported by Red Hat, Veracode, OSV, GHSA, NVD, CNNVD, and others. The consensus description is that an unauthorized user could bypass restrictions in the admin...

Design/Logic Flaw

An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through which an attacker may be able to access the administration panel...

Dotclear 2.29 Cross Site Scripting

Exploit Title: Dotclear Version : 2.29 - Reflected XSS Date: 2024-21-02 Exploit Author: tmrswrr Vendor Homepage: https://dotclear.org/ Version : 2.29 Tested on: https://softaculous.com/demos/dotclear 1 Enter admin panel after write search button this payload : " 2...

Dotclear 2.29 Cross Site Scripting Vulnerability

Exploit Title: Dotclear Version : 2.29 - Reflected XSS Exploit Author: tmrswrr Vendor Homepage: https://dotclear.org/ Version : 2.29 Tested on: https://softaculous.com/demos/dotclear 1 Enter admin panel after write search button this payload : " 2...

Cross-site Websocket Hijacking (CSWSH)

meshcentral is vulnerable to Cross-site Websocket HijackingCSWSH. The vulnerability is due to missing origin checks when using the control.ashx endpoint in MeshCentral. If an attacker can convince an admin end-user to click on a malicious link, they then can access the control.ashx admin panel...