7 matches found
CVE-2026-97818
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...
CVE-2026-97818
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...
CVE-2026-97818
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...
CVE-2026-97818
The phpIPAM software, through version 1.8.3 , is vulnerable to an incorrect authorization flaw located in api/controllers/User.php. The issue specifically involves incorrect handling for `id==
EUVD-2026-86523
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php...
CVE-2024-1198: Deserialization of Untrusted Data
A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization. It is possible to launch the atta...
CVE-2016-8869: Improper Input Validation
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain privileges by leveraging incorrect use of unfiltered data when registering on a site...