CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

Cashtomer <= 1.0.0 - Authenticated SQL Injection

An editid GET parameter of the plugin is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. GET /wp-admin/admin.php?page=add-social-point&id=facebookshare&editid=-9677%20UNION%20ALL%20SELECT%20NULL,NULL,user,NULL,NULL-- HTTP/1.1...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10728

Name of the Vulnerable Software and Affected Versions Piwigo version 2.10.1 Description A stored cross site scripting XSS issue in the "/admin.php?page=tags" endpoint allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the affected...

CVE-2020-22150: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10729

Name of the Vulnerable Software and Affected Versions Piwigo version 2.10.1 Description A cross site scripting XSS issue in the "/admin.php?page=permalinks" endpoint of Piwigo allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the...

CVE-2020-22148: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-20363

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

Cross site scripting

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

CVE-2020-20363

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

CVE-2020-20363

CVE-2020-20363 is a Cross‑Site Scripting (XSS) vulnerability in PbootCMS 2.0.3, specifically affecting the admin.php page. The connected CNVD/CNNVD entries describe the root cause as improper validation of client-side data in admin.php, enabling injection of script code. Other sources (NVD, Red H...

CVE-2020-20363: Improper Neutralization of Input During Web Page Generation

Crossi Site Scripting XSS vulnerability in PbootCMS 2.0.3 in admin.php...

PT-2021-10485

Name of the Vulnerable Software and Affected Versions: PbootCMS version 2.0.3 Description: The issue is a Cross Site Scripting XSS vulnerability. It affects the admin.php file. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

PbootCMS 跨站脚本漏洞

PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. PbootCMS suffers from a cross-site scripting vulnerability that stems from the product's admin.php page not properly validating client-side data. An attacke...

PT-2021-10930

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs via the 'New Shout' feature in the /infusions/shoutbox panel/shoutbox admin.php file. Recommendations For PHP-Fusion version 9.03.60,...

CVE-2020-18264

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

PT-2021-10165

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved via the "Simple-Log/admin/admin.php?act=act edit member" API endpoint. Recommendations: For Simple-Log versio...

PT-2021-10166

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved through a Cross Site Request Forgery CSRF in the "Simple-Log/admin/admin.php?act=act add member" component...