CVE-2024-22938

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component...

CVE-2024-22938

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component...

CVE-2024-22938: Incorrect Authorization

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component...

PT-2022-15340

Name of the Vulnerable Software and Affected Versions Metinfo version 7.5.0 Description A SQL injection issue was found in the parameter admin.class.php file, specifically via the table para parameter. This allows for potential exploitation. Recommendations For Metinfo version 7.5.0, consider...

PT-2019-14916

Name of the Vulnerable Software and Affected Versions Metinfo version 7.0.0beta Description A SQL Injection issue was found in the product admin.class.php file via the id parameter in the /admin/?n=product&c=product admin&a=dopara&app type=shop API endpoint. Recommendations For Metinfo version...

PT-2018-13910

Name of the Vulnerable Software and Affected Versions MetInfo version 6.1.0 Description The issue concerns SQL injection in the doexport function, located in the app/system/feedback/admin/feedback admin.class.php file, which is vulnerable via the class1 field. Recommendations For MetInfo version...

CVE-2015-6928

classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the...

CVE-2015-6928: Improper Access Control

classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the...

CVE-2005-1954

CVE-2005-1954 affects the Singapore 0.9.11 application. Affected component appears to be PHP-based templates/files: admin.class.php and any .tpl.php under templates/admin_default/ or templates/default/. An error message reveals the filesystem path, enabling an attacker to obtain sensitive informa...

CVE-2005-1954: Undefined Security Weakness

singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to 1 admin.class.php, 2 any .tpl.php file in templates/admindefault/, or 3 any .tpl.php file in templates/default/, which reveal the path in an error message...

CVE-2004-1407: Undefined Security Weakness

Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to 1 read arbitrary files via the showThumb method for thumb.php, or 2 delete arbitrary files via admin.class.php...

CVE-2004-1408: Undefined Security Weakness

The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files...

CVE-2004-1407

Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to 1 read arbitrary files via the showThumb method for thumb.php, or 2 delete arbitrary files via admin.class.php...