82 matches found
CVE-2026-30498
CVE-2026-30498 – Vulnerabilidad CSRF AdminPanel 4.0 Resumen ID CVE: CVE-2026-30498 Reservado por MITRE Descubridor: Mehdi Ben Hamou Existe una vulnerabilidad de Cross-Site Request Forgery CSRF en el endpoint delete.php de AdminPanel 4.0. Esta vulnerabilidad permite a un atacante desencadenar...
CVE-2026-30498
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
CVE-2026-30498
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
CVE-2026-30498: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
PT-2026-43996
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
CVE-2026-30498
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
CVE-2026-30498
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
CVE-2026-30498
A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...
EUVD-2020-5686
Malware in sbrugna...
EUVD-2017-6098
Malware in sbrugna...
PT-2025-37919
Name of the Vulnerable Software and Affected Versions: Kashipara Computer Base Test version 1.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists in the /users/adminpanel/admin/home.php?page=feedbacks file. Attackers can inject malicious scripts via the smyFeedbacks POST paramet...
CVE-2025-56697: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php...
CVE-2020-13433
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter...
CVE-2017-14597
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
CVE-2024-4919: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/addCourseExe.php. The manipulation of the argument coursename leads to sql injection. The attack can be initiated...
CVE-2024-2945
A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an unknown function of the file /adminpanel/admin/faceboxmodal/updateExaminee.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...
CVE-2024-2943: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/deleteExamExe.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...
CVE-2023-2642: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...
CVE-2021-46117
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...