8 matches found
CVE-2021-41126
October is a Content Management System CMS and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October CMS v2.0. The issue has been patched in v2.1.12 of the...
Admin Account Persistence after Deletion
...
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...
CVE-2024-29401: Insufficient Session Expiration
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...
CVE-2024-29401
xzs-mysql version 3.8 is vulnerable to Insufficient Session Expiration . This flaw allows an attacker to utilize the active session of a deleted administrator to perform any action within the system. While the specific root cause mechanism is not detailed, the impact is significant as it grants u...
