CVE-2026-49227: Authorization Bypass Through User-Controlled Key

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and...

PT-2025-43543

Name of the Vulnerable Software and Affected Versions Gnuboard version 5.6.15 Description An issue exists in Gnuboard 5.6.15 that allows authenticated attackers to execute arbitrary code. This is possible through the manipulation of the c id parameter within the ''bbs/view comment.php'' file. The...

EUVD-2006-3256

Malware in sbrugna...

EUVD-2005-0476

Malware in sbrugna...

EUVD-2006-1137

Malware in sbrugna...

EUVD-2020-13792

Malware in sbrugna...

EUVD-2020-2920

Malware in sbrugna...

EUVD-2018-8857

Malware in sbrugna...

EUVD-2006-3304

Malware in sbrugna...

EUVD-2003-1337

Malware in sbrugna...

EUVD-2021-31733

Malicious code in bioql PyPI...

CVE-2024-0473: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation of the argument com leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

PT-2024-15590

Name of the Vulnerable Software and Affected Versions code-projects Dormitory Management System version 1.0 Description A critical vulnerability has been found in the code-projects Dormitory Management System. The issue is related to an unknown function of the file comment.php, where the...

CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2022-4397: Incorrect Authorization

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

PT-2022-8943

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to SQL injection. It can be exploited via the c id parameter of "admin edit comment.php", the p id parameter of "admin edit post.php", the u id parameter of "admin edit user.php", and the...

CVE-2022-24585

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

CVE-2022-24585: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...