25 matches found
CVE-2026-78302: Improper Neutralization of Input During Web Page Generation
Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting XSS via Unescaped Output in Views and Admin Lists in SP Property 4.1.4 - Multiple template files across frontend views and administrator list tables rendered attributes and text values directly into HTML without...
EUVD-2021-28109
Malicious code in bioql PyPI...
EUVD-2022-47866
Malicious code in bioql PyPI...
EUVD-2025-14270
Malicious code in bioql PyPI...
CVE-2022-44937
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...
CVE-2025-4560 Netvision ISOinsight - Missing Authentication
The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...
CVE-2025-4560: Missing Authentication for Critical Function
The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...
CVE-2022-44849
A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...
PT-2022-27324 · Metinfo · Metinfo
Name of the Vulnerable Software and Affected Versions: MetInfo version 7.7 Description: A Cross-Site Request Forgery CSRF issue in the Administrator List allows attackers to arbitrarily add a Super Administrator account. This enables unauthorized access and control over the system. Recommendation...
CVE-2022-44849: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...
CVE-2022-44849
A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...
CVE-2022-44849
MetInfo v7.7 contains a CSRF in the Administrator List that allows an attacker to arbitrarily add a Super Administrator account. Affected component: Administrator List (MetInfo 7.7). Root cause: CSRF-vulnerability enabling unauthorized privilege elevation. Impact per sources: high confidentiality...
CVE-2022-44937
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...
CVE-2022-44937
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...
Cross site request forgery (csrf)
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...
CVE-2022-44937
Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...
PT-2022-27338 · Bosscms · Bosscms
Name of the Vulnerable Software and Affected Versions: Bosscms version 2.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF that was discovered in Bosscms. This CSRF is specifically via the Add function under the Administrator List module. Recommendations: For Bosscms...
BossCMS 跨站请求伪造漏洞
Wenzhou Huoyin Information Technology BossCMS is a content management system based on MySQL architecture of self-developed PHP framework by Wenzhou Huoyin Information Technology. A security vulnerability exists in BossCMS v2.0.0, which was discovered through the add function under the administrat...