The vulnerability of the exceedone/exment and exceedone/laravel-admin software lies in the possibility of introducing commands that allow attackers to execute arbitrary SQL queries against the application’s database.

The vulnerability of the exceedone/exment and exceedone/laravel-admin software lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the application’s database remotely...

PT-2022-4656 · Exceedone · Exment +1

Name of the Vulnerable Software and Affected Versions: exceedone/exment versions 5.0.2 and earlier exceedone/exment versions 4.4.2 and earlier exceedone/laravel-admin versions 3.0.0 and earlier exceedone/laravel-admin versions 2.2.2 and earlier Description: The issue is related to a SQL injection...

PT-2022-24191 · Exceedone · Exment +1

Name of the Vulnerable Software and Affected Versions: exceedone/exment versions 5.0.2 and earlier exceedone/exment versions 4.4.2 and earlier exceedone/laravel-admin versions 3.0.0 and earlier exceedone/laravel-admin versions 2.2.2 and earlier Description: A reflected cross-site scripting issue...

CVE-2022-38089: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Exment PHP8 exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, PHP7 exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier allows a remote authenticated attacker to inject an arbitrary script...