CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Некорректное управление доступом Описание В версии 6.03 BoltWire CMS можно использовать уязвимость «Некорректное управление доступом» через параметр index.php?p=member.admin&action=data, что позволяет атакующему просмотреть пароль любого пользователя, включая...

CVE-2022-24227-updated

CVE-2022-24227 Обновлено - BoltWire v8.00 - Межсайтовый скриптинг XSS с сохранением Описание CVE-2022-24227 Обновлено : В версии 8.00 CMS BoltWire поля «Имя» и «Фамилия» на странице завершения регистрации участника также уязвимы для атак с межсайтовым скриптингом XSS с сохранением, как и в версии...

EUVD-2013-2590

Malware in sbrugna...

EUVD-2013-0748

Malware in sbrugna...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

The vulnerability of the BoltWire content management system, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the BoltWire content management system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

Design/Logic Flaw

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-46501

BoltWire CMS v6.03 is affected by an vulnerability described across multiple sources as an improper access control issue that enables a remote attacker to obtain sensitive information by crafting payloads to the view and change admin password function. The issue is consistently tied to BoltWire v...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

BoltWire Security Vulnerability

BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A security vulnerability exists in BoltWire version v.6.03, which stems from a vulnerability that allows remote attackers to obtain sensitive information via a crafted...

PT-2023-7563 · Boltwire · Boltwire

Name of the Vulnerable Software and Affected Versions: BoltWire version 6.03 Description: The issue in BoltWire allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function. This is related to insufficient protection of service data...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

Cross site scripting

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...