Cross site request forgery (csrf)

A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users...

CVE-2020-23342

A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users...

CVE-2020-23342

A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users...

PT-2021-10883

Name of the Vulnerable Software and Affected Versions Anchor CMS version 0.12.7 Description A CSRF issue exists in the anchor/views/users/edit.php file of Anchor CMS, allowing the deletion of admin users. Recommendations For Anchor CMS version 0.12.7, consider disabling the edit user functionalit...

CVE-2020-23342: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users...

MiniCMS Directory Traversal Vulnerability

MiniCMS is a micro content management system designed for personal websites. A directory traversal vulnerability exists in post-edit.php in MiniCMS V1.10. A remote attacker can exploit this vulnerability to include and execute arbitrary files via the state parameter...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

CVE-2020-36052

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

PT-2021-11912

Name of the Vulnerable Software and Affected Versions: MiniCMS version V1.10 Description: The issue allows remote attackers to include and execute arbitrary files via the state parameter in the post-edit.php file. This enables attackers to potentially access and execute sensitive files on the...

PT-2021-11911

Name of the Vulnerable Software and Affected Versions: MiniCMS version V1.10 Description: The issue allows remote attackers to read arbitrary files via the state parameter in the page edit.php file. This enables access to sensitive information. Recommendations: For MiniCMS version V1.10, consider...

CVE-2020-36052: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbitrary files via the state parameter...

MiniCMS path traversal vulnerability

MiniCMS is a micro content management system designed for personal websites. A directory traversal vulnerability exists in post-edit.php in MiniCMS V1.10. A remote attacker can exploit this vulnerability to include and execute arbitrary files via the state parameter...

PT-2020-14435

Name of the Vulnerable Software and Affected Versions Persian VIP Download Script version 1.0 Description The issue allows SQL Injection via the active parameter in the "cart edit.php" endpoint. Recommendations For version 1.0, avoid using the active parameter in the "cart edit.php" endpoint unti...

PT-2020-14346

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! or SiTracker version 3.67 p2 Description The issue allows post-authentication SQL injection via several parameters, including typeid or site in "site edit.php", search title in "search incidents advanced.php",...

CVE-2020-13157: Cross-Site Request Forgery (CSRF)

modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed...

PT-2020-13753

Name of the Vulnerable Software and Affected Versions Kordil EDMS versions through 2.2.60rc3 Description The issue allows stored XSS in several PHP files, including users edit.php, users management edit.php, and user management.php. Recommendations For versions through 2.2.60rc3, consider disabli...

PT-2020-13570

Name of the Vulnerable Software and Affected Versions bbPress plugin versions through 2.6.4 Description The issue concerns stored XSS in the Forum creation section of the bbPress plugin, allowing JavaScript execution at the "wp-admin/edit.php?post type=forum" API endpoint, which is the Forum...

CVE-2020-13487: Improper Neutralization of Input During Web Page Generation

The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...

DEBIAN-CVE-2020-8865

This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within edit.php. When parsing the paramstemplate parameter, the process doe...

Design/Logic Flaw

This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The specific flaw exists within edit.php. When parsing the paramstemplate parameter, the process doe...