CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - 不適切なアクセス制御 説明 BoltWire CMSのバージョン6.03 では、index.php?p=member.admin&action=dataパラメータを介して「不適切なアクセス制御」の脆弱性を悪用することが可能です。これにより、攻撃者は管理者を含む任意のメンバーのパスワードを閲覧できるため、情報の窃取、データの任意変更、アプリケーションの悪意ある操作が可能になります。 修正方法 BoltWire CMSの最新バージョンにアップデートしてください。 再現手順: 1 新しいメンバーを作成します。 2...

CVE-2022-24227-updated

CVE-2022-24227 更新 - BoltWire v8.00 - 保存型クロスサイトスクリプティング XSS 説明 CVE-2022-24227 更新 : BoltWire CMS バージョン 8.00 では、メンバー登録完了ページの First Name および Last Name フィールドも、バージョン 7.10 と同様に保存型クロスサイトスクリプティング XSS 攻撃に対して脆弱です。この種の攻撃により、悪意のあるスクリプトが実行される可能性があります。 修正提案 これらのフィールドへのユーザー入力をサニタイズしてください。 再現手順: 1 新しいメンバーを作成します。 ...

EUVD-2013-2590

Malware in sbrugna...

EUVD-2013-0748

Malware in sbrugna...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

The vulnerability of the BoltWire content management system, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the BoltWire content management system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

Design/Logic Flaw

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

BoltWire CMS v6.03 is affected by an vulnerability described across multiple sources as an improper access control issue that enables a remote attacker to obtain sensitive information by crafting payloads to the view and change admin password function. The issue is consistently tied to BoltWire v...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

BoltWire Security Vulnerability

BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A security vulnerability exists in BoltWire version v.6.03, which stems from a vulnerability that allows remote attackers to obtain sensitive information via a crafted...

PT-2023-7563 · Boltwire · Boltwire

Name of the Vulnerable Software and Affected Versions: BoltWire version 6.03 Description: The issue in BoltWire allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. This is related to insufficient protection of service data...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

Cross site scripting

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...