CVE-2018-11679: Cross-Site Request Forgery (CSRF)

An issue was discovered in CmsEasy 6.120180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admindir=admin...

CVE-2017-11675

ZenCart 1.5.5e contains a vulnerability in traverseStrictSanitize within admin_dir/includes/classes/AdminRequestSanitizer.php. The sanitizer mishandles key strings, enabling remote authenticated users to execute arbitrary PHP code by injecting code into an invalid array index of the admin_name pa...

CVE-2017-11675: Improper Control of Generation of Code

The traverseStrictSanitize function in admindir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the adminname array parameter to...