CVE-2026-68527: Authorization Bypass Through User-Controlled Key

Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar event edit dialog concrete/controllers/dialog/event/edit.php. The dialog checked permissions against the calendar identifier supplied in the request rather than the calendar owning the targeted eve...

PT-2017-15140

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Muslim Matrimonial Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the edit id...

PT-2012-5056

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to several API endpoints, including "data/gallery/edit.php",...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...