1610 matches found
CVE-2024-39248
Exploit Title: SimpCMS v0.1 - 크로스 사이트 스크립팅 XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php SimpCMS v0.1의 크로스 사이트 스크립팅XSS 취약점으로 인해 공격자가 /admin.php의 Title 필드에 삽입된 조작된 페이로드...
CVE-2022-27413
Hospital-Management-System v1.0 - SQLi ベンダー 説明: 脆弱性のあるページは admin.php です。 http://you ip/HMS/admin.php Hospital-Management-System v1.0 admin.php ページの adminname パラメータは、SQLインジェクション攻撃に対して脆弱であるようです。 +sqlmap:...
CVE-2020-25273
CVE-2020-25273 Online Bus Booking System 1.0 には、admin.php の管理ログイン画面で、ユーザー名またはパスワードのSQLインジェクションによる認証バイパスが存在します。 ベンダー - SourceCodester 製品 -https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html V 1.0 脆弱性タイプ - 認証バイパス 影響を受けるコンポーネント - busbooking/admin.php 攻撃タイプ ...
CVE-2025-57310
CVE-2025-57310 Salmen2/Simple-Faucet-Script v1.07에서 admin.php?p=ads&c=1로 조작된 POST 요청을 통해 발생하는 교차 사이트 요청 위조CSRF 취약점으로, 공격자가 임의 코드를 실행할 수 있습니다. CWE CWE-352: 교차 사이트 요청 위조CSRF CVSS v3.1 기본 점수: 8.8 높음 root@kitploit: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 요약 이 제품은 관리자 패널에서 교차 사이트 요청 위조CSRF에 취약합니다...
CVE-2026-38192
pluck-CMS-4.7.20-code-injection-vulnerability admin.php内のmoduleaddtosite関数は、$POST配列全体を反復処理し、ユーザーが制御可能なパラメータ名をexplode'|',...
CVE-2009-4623
CVE-2009-4623 CVE-2009-4623 のリモートシェル: 非対話型シェルを取得し、高度な使用のために別のシェルを開きます !!! 使い方: CVE-2009-4623.sh hostnameandPath 例: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php オプション: -h このガラクタ...
CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...
CVE-2026-86670
aircheng-org iWebShop-5 versions up to 5.15 contain a vulnerability in the Authentication Storage component within the file controllers/admin.php . Manipulating the Password argument can result in a password hash with insufficient computational effort , effectively weakening credential protection...
CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...
CVE-2026-63302
Quick.CMS is vulnerable to Local File Inclusion LFI in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application's directory structure via a crafted HTTP request. Successful exploitation allows disclosure...
CVE-2016-20070
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
EUVD-2019-20182
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicatequoteinvoice and...
PT-2026-49225
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicate quote invoice an...
CVE-2026-11480
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown function of the file beike/Admin/Routes/admin.php of the component Admin Design Builder Endpoint. Performing a manipulation of the argument settings.value results in sql injection. I...
CVE-2026-9609
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
EUVD-2026-32029
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
CVE-2026-9609 QianFox FoxCMS Admin.php edit password recovery
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem...
CVE-2026-8626
CVE-2026-8626 concerns the SponsorMe WordPress plugin, vulnerable to Reflected Cross-Site Scripting via the PHP_SELF parameter in all versions up to 0.5.2. The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts int...
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers can modify the download parameter in admin.php requests with directory traversal sequences to access...
CVE-2020-37246
Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers can modify the download parameter in admin.php requests with directory traversal sequences to access...