CVE-2022-30863

FUDForum 3.1.2 is vulnerable to Cross Site Scripting XSS via pagetitle param in Page Manager in the Admin Control Panel...

CVE-2022-30863

CVE-2022-30863 affects FUDForum 3.1.2 and is documented as a Cross-Site Scripting (XSS) vulnerability via the page_title parameter in the Page Manager of the Admin Control Panel. The provided connected sources consistently describe the issue but do not specify technical details beyond the vulnera...

CVE-2022-30863

FUDForum 3.1.2 is vulnerable to Cross Site Scripting XSS via pagetitle param in Page Manager in the Admin Control Panel...

CVE-2022-30860

FUDforum 3.1.2 is vulnerable to remote code execution via the Upload File feature of the File Administration System in the Admin Control Panel. Connected advisories and vendor pages consistently describe an arbitrary file upload vulnerability that could allow code execution on affected systems. S...

CVE-2022-30860

FUDforum 3.1.2 is vulnerable to Remote Code Execution through Upload File feature of File Administration System in Admin Control Panel...

phpBB Cross-Site Request Forgery (CSRF)

In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...

GHSA-VJ3X-VFM4-HVXC phpBB Cross-Site Request Forgery (CSRF)

In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...

The vulnerability of the Admin CP configuration module of the MyBB forum creation software allows a hacker to execute arbitrary code.

The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Jupiter < 6.10.2 - Subscriber+ Arbitrary Plugin Deletion

Any authenticated user, such as subscriber, can delete arbitrary plugins via the abbremoveplugin AJAX action registered in the framework/admin/control-panel/logic/plugin-management.php file...

GHSA-H3MR-Q96R-37V4 phpBB Remote Code Execution

Passing an absolute path to a fileexists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions...

phpBB Remote Code Execution

Passing an absolute path to a fileexists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions...

After updating Veeam Backup & Replication, Mine repository fails to update

End-of-Life Product Nutanix Mine with Veeam reached End-of-Life on 2026-04-30. As of this date, all support services for this product are unavailable. For more information, see the Nutanix EOL Announcement Bulletin - Nutanix Mine, released 2025-04-30. Challenge After installing an update to Veeam...

Rainworx Auctionworx 跨站请求伪造漏洞

Rainworx Auctionworx is an online auction software. A security vulnerability previously existed in Rainworx Auctionworx version 3.1R2 that allowed authenticated users to upgrade their account to administrator and gain access to the Auctionworx administrator control panel, resulting in a cross-sit...

CVE-2022-1509

Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context...

Sed Injection Vulnerability

Description In Hestia Control Panel 1.5.11, several v-scripts shell scripts have sed injection vulnerabilities. By chaining these vulnerabilities, an authenticated remote attacker with low privileges can execute arbitrary code under root context. Sed injection vulnerabilities exist in the followi...

MyBB Admin Control Panel Remote Code Execution (CVE-2022-24734)

A code injection vulnerability exists in MyBB. The vulnerability is due to insufficient input validation when parsing user input sent to Admin Control Panel...

Dairy Farm Shop Management System Hardcoded Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A hard-coded vulnerability exists in the Dairy Farm Shop Management System, which stems from hard-coded credentials in the code that can be exploited by an attacker to access the control panel...

Russian threat actor UAC-0056 targets European countries

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. The Governmental Computer Emergency Response Team of Ukraine CERT-UA has released an alert about a Russian threat actor UAC-0056 SaintBear, UNC2589, TA471 delivering malwares using email attachments. UNC2589 is a cyber...

Hestiacp Cross-Site Scripting Vulnerability (CNVD-2022-21544)

Hestiacp is a control panel used to provide administrators with an easy-to-use Web and command-line interface that enables them to quickly deploy and manage Web domains, mail accounts, DNS zones, and databases from a central dashboard.Hestiacp contains a cross-site scripting vulnerability that...

CWP Panel 代码注入漏洞

CWP Panel is a modern and advanced Linux control panel from CWP Inc. for web hosting service providers and system administrators. A code injection vulnerability exists in CWP Panel el8-latest, which could allow a remote attacker to execute arbitrary code on an affected system...