PT-2022-24370

Name of the Vulnerable Software and Affected Versions Shopxian CMS version 3.0.0 Description A CSRF issue allows deletion of a specified column via the "index.php/contents-admin cat-finderdel-model-ContentsCat.html" endpoint, specifically when the id parameter is set to 17. Recommendations For...

CVE-2020-19305

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges...