CVE-2026-41890: Improper Input Validation

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.31.1.0 to before version 0.31.8.0, the deleteProcess action accepts a POST parameter tables containing arbitrary table names. These are pass...

EUVD-2015-6457

Malware in sbrugna...

CVE-2015-6518

Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...

PT-2015-7282

Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the PATH INFO, the...

CVE-2015-6518: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...

CVE-2015-6517: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php...

PT-2015-7281

Name of the Vulnerable Software and Affected Versions phpLiteAdmin version 1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests, specifically to drop database tables via the droptable parameter to the "phpliteadmin.php" endpoin...