CVE-2019-14228

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF...

PT-2019-13548

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 3.0 Description The issue concerns a Reflected POST-based XSS that occurs via the username parameter when registering a new user at the "admin/includes/adminprocess.php" endpoint. If an error occurs during...

CVE-2019-14228: Improper Neutralization of Input During Web Page Generation

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF...

PT-2015-3521

Name of the Vulnerable Software and Affected Versions Simple PHP Agenda versions 2.2.8 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through requests to several API endpoints, including...

CVE-2012-1978: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator via a request to auth/process.php, 2 delete an administrator via a request to...