11676 matches found
Cross site request forgery (csrf)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Top Up Balance component under the Edit Member module...
Cross site request forgery (csrf)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...
CVE-2022-44387
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...
PT-2022-27206 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9-UTF8-SP1 Description: A Cross-Site Request Forgery CSRF issue was discovered in the Basic Information component under the Edit Member module. This allows for unauthorized actions to be performed on behalf of a user...
PT-2022-26848 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9-UTF8-SP1 Description: A Cross-Site Request Forgery CSRF issue was discovered in the Top Up Balance component under the Edit Member module. This allows for malicious requests to be made without the user's knowledge or...
CVE-2022-44387
CVE-2022-44387 affects EyouCMS v1.5.9-UTF8-SP1. A CSRF vulnerability exists in the Basic Information component of the Edit Member module, potentially allowing unauthorized actions to be performed on behalf of a user. Root cause is CSRF in that module. Remediation is recommended: implement CSRF to...
CVE-2022-44387
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...
CVE-2022-43323
CVE-2022-43323 affects EyouCMS version 1.5.9-UTF8-SP1. The issue is a Cross-Site Request Forgery (CSRF) in the Top Up Balance component within the Edit Member module. Root cause detail is CSRF in the specific Top Up Balance functionality; exploitation details are not elaborated beyond the CSRF la...
PT-2022-27207 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9-UTF8-SP1 Description: A Cross-Site Request Forgery CSRF issue was discovered in the Edit Admin Profile module, allowing attackers to arbitrarily change Administrator account information. Recommendations: For EyouCMS...
CVE-2022-43323
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Top Up Balance component under the Edit Member module...
EyouCms 跨站请求伪造漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9-UTF8-SP1, which originates from the Top Up Balance component of its Edit Member module that...
xss in live edit
Description when you make website and login as admin if u add user as admin he maybe evil admin n live edit https://demoxss.microweber.net/?editmode=y i start edit as html i see i can write script but didnt pass when u open site as end user then i just try add html tag with events but the sam...
PT-2022-28209 · Packagist · Ibexa/Admin-Ui
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue allows for JavaScript XSS injection in content type entries, specifically in the name and short name fields. This can be exploited by individuals who already have permission to...
Canteen Management System SQL注入漏洞
Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter on /youthappam/editcategory.php...
HTML Injection
froxlor/froxlor is vulnerable to HTML Injection. The vulnerability exists due to invalid email address in index on error message which allows an attacker can inject and execute malicious HTML content in the web page through the edit customer option in the library...
Malicious code in edit_session (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5262a7b3f13c75a5fffc355c0d48d11e4225a31fdc940e73cddd14429be60c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-26844 · Unknown · Human Resource Management System
Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the stateedit parameter at the "/hrm/state.php" API endpoint. There is no information...
CVE-2022-42743 deep-parse-json 1.0.2 - Prototype Pollution
deep-parse-json version 1.0.2 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the 'proto' property to be edited...
CVE-2022-42743 deep-parse-json 1.0.2 - Prototype Pollution
deep-parse-json version 1.0.2 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the 'proto' property to be edited...