CVE-2020-19879

DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $GET'dbhcmspid' variable in dbhcms\page.php line 107,...

PT-2020-15215

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0 Description The issue concerns the lack of a CSRF protection mechanism. This can be demonstrated through a CSRF attack on the "index.php?dbhcms pid=-70" endpoint, which allows adding a user. Recommendations For DBHcms...

PT-2020-15205

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0 Description The issue is related to a stored XSS vulnerability due to the lack of a security filter for the dbhcms pid variable in the dbhcmspage.php file at line 107. This allows for potential exploitation. Recommendation...