CVE-2026-49227: Authorization Bypass Through User-Controlled Key

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and...

EUVD-2020-2920

Malware in sbrugna...

EUVD-2018-8857

Malware in sbrugna...

EUVD-2006-1137

Malware in sbrugna...

EUVD-2005-0476

Malware in sbrugna...

EUVD-2003-1337

Malware in sbrugna...

EUVD-2006-3256

Malware in sbrugna...

EUVD-2006-3304

Malware in sbrugna...

EUVD-2020-13792

Malware in sbrugna...

EUVD-2021-31733

Malicious code in bioql PyPI...

CVE-2024-0473: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation of the argument com leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2022-4397: Incorrect Authorization

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

PT-2022-8943

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to SQL injection. It can be exploited via the c id parameter of "admin edit comment.php", the p id parameter of "admin edit post.php", the u id parameter of "admin edit user.php", and the...

CVE-2022-24585: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

GlFusion Cms Access Control Error Vulnerability

glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an access control error, which can be exploited by attackers via /publichtml/comment.php...

CVE-2021-44935

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...

CVE-2021-44935

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...

Information disclosure

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /publichtml/comment.php. The attacker can complete the attack remotely without interaction...