1606 matches found
Elementor Page Builder < 2.8.5 - Authenticated Reflected XSS
The Elementor Website Builder WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability. /wp-admin/admin.php?page=elementor-system-info&lndan%22%3e%3cscript%0csrc%3d//0x7f000001%3e%3c/script%3e=1...
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
ZenPhoto Cross-Site Request Forgery Vulnerability
ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site request forgery vulnerability exists in the admin.php file in Zenphoto versions prior to 1.4.9. The vulnerability stems from the WEB applicatio...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack the authentication of admin users for requests that may cause a denial of service resource consumption...
CVE-2015-5595
Zenphoto is affected by a CSRF in admin.php prior to version 1.4.9 that could allow an attacker to hijack an admin’s session and trigger requests leading to resource consumption (denial of service). Public sources confirm the vulnerability exists in Zenphoto
CVE-2019-14343
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
Cross site scripting
TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabularioid=list URI...
CVE-2019-17593
CVE-2019-17593 affects JIZHICMS 1.5.1, where a CSRF flaw in admin.php/Admin/adminadd.html can be exploited to add an administrator. Multiple sources (NVD, RH, CNVD, OSV, CVE lists) corroborate that this is a cross‑site request forgery vulnerability in JIZHICMS 1.5.1. The CVSS data from NVD indica...
CVE-2019-17580
tonyy dormsystem through 1.3 allows SQL Injection in admin.php...
Sql injection
tonyy dormsystem through 1.3 allows SQL Injection in admin.php...
CVE-2019-17580
The CVE-2019-17580 entry corresponds to Tooonyy dormsystem prior to or at version 1.3, where a SQL injection vulnerability exists in admin.php due to lack of validation of externally-entered SQL statements. The connected records (CNVD-2020-14283, RH: CVE-2019-17580, OSV and CVE listings) corrobor...
CVE-2019-17580
tonyy dormsystem through 1.3 allows SQL Injection in admin.php...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
PbootCMS Cross-Site Scripting Vulnerability
PbootCMS is a new core open source enterprise building system developed by Avantech. A cross-site scripting vulnerability exists in PbootCMS 2.0.2, which can be exploited to conduct cross-site scripting attacks via routes involving Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URI...
CVE-2019-17417
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs...
CVE-2015-9442
The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenirplugin...
CVE-2015-9448
The CVE-2015-9448 issue affects the WordPress SendPress plugin (versions prior to 1.2). The vulnerability is an SQL Injection in the wp-admin/admin.php?page=sp-queue listid parameter. Impact per sources includes manipulation/exfiltration of data via the web interface, with CVSS scores indicating ...