CVE-2020-23836: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in edituser.php in OSWAPP Warehouse Inventory System aka OSWA-INV through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site...

CVE-2018-18545

Fiyo CMS 2.0.7 has XSS via the dapur\apps\appuser\edituser.php name parameter...

Design/Logic Flaw

Fiyo CMS 2.0.7 has XSS via the dapur\apps\appuser\edituser.php name parameter...

CVE-2018-18545

The collected records confirm CVE-2018-18545 affects Fiyo CMS 2.0.7, with a Cross‑Site Scripting (XSS) vulnerability exposed via the name parameter in the file path dapur/apps/app_user/edit_user.php. The issue is documented as an XSS path in multiple sources (e.g., NVD and CNVD/CVE mirrors) and i...

CVE-2018-18545: Improper Neutralization of Input During Web Page Generation

Fiyo CMS 2.0.7 has XSS via the dapur\apps\appuser\edituser.php name parameter...

CVE-2018-9162

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...

CVE-2018-9162: Missing Authentication for Critical Function

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...

CVE-2009-2328: Improper Authentication

admin/edituser.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the deluserid parameter...

CVE-2006-7145: Undefined Security Weakness

edituser.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified userid parameter...