56 matches found
Exploit for CVE-2026-64638
██╗ ██╗███████╗███████╗██████╗ ███████╗██╗ ██╗███████╗██╗...
CVE-2026-54507: Server-Side Request Forgery (SSRF)
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, the oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl, while validateUrl in system/functions.php...
PT-2025-42631
Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2 - 147 Description ClipBucket is a web-based video-sharing platform. The /admin area/template editor.php API endpoint has insufficient validation of the file-loading path. This allows administrators to read an...
EUVD-2017-3046
Malware in sbrugna...
EUVD-2017-18225
Malware in sbrugna...
EUVD-2008-2112
Malware in sbrugna...
PT-2023-26067
Name of the Vulnerable Software and Affected Versions Pligg CMS version 2.0.2 Description A remote code execution RCE issue was found in the admin editor.php component. Recommendations For Pligg CMS version 2.0.2, at the moment, there is no information about a newer version that contains a fix fo...
Billing System Project SQL Injection Vulnerability
Billing System Project is a billing system project by Mayuri K. Individual developer. A security vulnerability exists in Billing System Project v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter in editor.php...
Cross-site Scripting (XSS)
icecoder/icecoder is vulnerable to cross-site scripting. The vulnerability exists in editor.php because the conditions are not properly handled which allows an attacker to craft and send malicious scripts to an unsuspecting user...
PT-2021-22527
Name of the Vulnerable Software and Affected Versions: H5P CSS Editor WordPress plugin versions up to and including 1.0 Description: The issue allows attackers to inject arbitrary web scripts via the h5p-css-file parameter in the /h5p-css-editor.php file, enabling Reflected Cross-Site Scripting...
CVE-2021-39318: Improper Neutralization of Input During Web Page Generation
The H5P CSS Editor WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the h5p-css-file parameter found in the /h5p-css-editor.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...
PT-2019-6894
Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Recommendations For Mambo CMS version 4.6.5, consider restricting...
CVE-2013-2565: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...
Sql injection
Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...
CVE-2017-11419
Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...
PT-2017-12001
Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns SQL injection. It can be exploited via the /apps/app article/controller/editor.php endpoint using the $ POST'id' and $ POST'art title' variables. Recommendations For Fiyo CMS version 2.0.7,...
CVE-2017-11419: Improper Neutralization of Special Elements used in an SQL Command
Fiyo CMS 2.0.7 has SQL injection in /apps/apparticle/controller/editor.php via $POST'id' and $POST'arttitle'...
CVE-2017-9289
Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php edit parameter...
CVE-2017-9289
CVE-2017-9289 affects Bram Korsten Note up to version 1.2.0, with a reflected XSS in the file note-source/ui/editor.php (edit parameter). The connected documents corroborate a cross-site scripting vulnerability in Bram Korsten Note 1.2.0 and earlier. The description does not provide concrete reme...
