CVE-2021-43776

CVE-2021-43776 is a Cross-Site Scripting vulnerability in the Backstage project, specifically within the auth-backend plugin. Affected versions allow an attacker to trick a user into visiting a vulnerable URL, enabling an XSS attack that could exfiltrate access tokens or other secrets from the us...

CVE-2019-14850

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause...

Command Execution Vulnerability in Extreme CMS Backend Plugin Installation

Extreme CMS is an open source and free CMS web content management system in PHP language. A command execution vulnerability exists in the backend plugin installation of Extreme CMS. Attackers can use this vulnerability to obtain server privileges...

LOCKON EC-CUBE BbAdminViewsControl Plugin SQL Injection Vulnerability

LOCKON EC-CUBE is a set of open source e-commerce website building platform. bbAdminViewsControl is one of the backend screen management plugin. LOCKON EC-CUBE BbAdminViewsControl suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting...

CVE-2014-5196

The CVE-2014-5196 entry details a CSRF vulnerability in the WordPress plugin Improved User Search in Backend (backend) prior to version 1.2.5. The flaw resides in the iusib_meta_fields parameter, enabling remote attackers to hijack administrator authentication by injecting XSS sequences. Affected...

PT-2014-6335

Name of the Vulnerable Software and Affected Versions Improved user search in backend plugin versions prior to 1.2.5 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that insert XSS sequences via the iusib me...