5011 matches found
Smart SMS & Email Manager 3.3 - contact_type_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Smart SMS & Email Manager v3.3 - SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/smart-sms-email-manager-ssem/14817919 Version: 3.3 Tested on: Kali linux...
philipsecurity.com XSS vulnerability
Open Bug Bounty ID: OBB-649114 Description| Value ---|--- Affected Website:| philipsecurity.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Jirafeau Cross-Site Request Forgery Vulnerability (CNVD-2018-13352)
Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the delete file feature of the admin panel in versions of Jirafeau prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to delete files uploaded by other users via...
CVE-2018-14069
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add...
CVE-2016-9482 PHP FormMail Generator generates PHP code for standard web forms, and the code generated is vulnerable to authentication bypass
Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel...
CVE-2018-13850
The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...
Jirafeau Cross-Site Request Forgery Vulnerability
Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the administration panel in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to perform a file lookup operation and perform a cross-site...
CSRF vulnerability in the admin panel
More info at https://sylius.com/blog/csrf-vulnerability-in-admin-panel/...
CSRF vulnerability in the admin panel
More info at https://sylius.com/blog/csrf-vulnerability-in-admin-panel/...
CVE-2018-13407
A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused...
CVE-2018-13407
A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused...
CVE-2018-13407
The CVE-2018-13407 entry describes a CSRF vulnerability in Jirafeau before version 3.4.1 where the admin panel’s “delete file” function is not protected against automated requests, enabling potential abuse. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.), all alignin...
Stellar.org: Admin panel of https://www.stellar.org/wp-admin/
https://www.stellar.org/wp-admin/ link has various operations which should not be accessible to an anonymous user. As admin panel is accessible an attacker can use this information in targeted attack and he can bruteforce the username and password. on the other side server information is easily...
CVE-2018-1000502
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel Tools and Maintenance - Task Manager - Add New Task that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have...
CVE-2018-1000502
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel Tools and Maintenance - Task Manager - Add New Task that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have...
Design/Logic Flaw
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel Tools and Maintenance - Task Manager - Add New Task that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have...
CVE-2018-1000502
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel Tools and Maintenance - Task Manager - Add New Task that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have...
CVE-2018-1000502
The CVE-2018-1000502 in MyBB concerns a File Inclusion vulnerability in the Admin panel (Tools and Maintenance → Task Manager → Add New Task). The issue allows Local File Inclusion on newer PHP versions and Remote File Inclusion on older PHP versions when an attacker has admin access. Affected so...
Security Bulletin: IBM QRadar SIEM does not enforce session expiry. (CVE-2015-2005)
Summary Session Expiry not enforced by default in IBM QRadar SIEM Vulnerability Details CVE-ID: CVE-2015-2005 Description: IBM QRadar SIEM could allow a local user to obtain sensitive information due to session expiration not being enforced. A user on the machine could obtain information from the...
Security Bulletin: IBM QRadar SIEM is vulnerable to shell command injection vulnerability in the admin panel. (CVE-2015-4930, CVE-2015-2016 )
Summary IBM QRadar SIEM is vulnerable to a shell command injection the in admin panel if logged in as an admin user. Vulnerability Details CVE-ID: CVE-2015-4930 Description: IBM QRadar could allow a user authenticated with admin access, to execute commands on the server as root. CVSS Base Score:8...