CVE-2019-11374

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin=admin=add URI...

EUVD-2018-2341

Malware in sbrugna...

EUVD-2018-9179

Malware in sbrugna...

CVE-2018-13010

WSTMall v1.9.1170316 has CSRF via the index.php?m=Admin=Users=edit URI to add a user account...

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

PT-2019-12433

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a web site physical path leakage. This can be demonstrated by sending a request to the 'ajax/index.php?uri=1234' endpoint, which is handled by the routers/ajaxRouter.php file in doorGets...

CVE-2019-11374

74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...

CVE-2018-12988

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI...

CVE-2018-12988

GreenCMS 2.3.0603 has an arbitrary file download vulnerability via an index.php?m=admin&c=media&a=downfile URI...

易思espcms某处sql注入漏洞，附详细分析与POC代码

简要描述： 小菜刚学代码审核 详细说明： 文件 /interface/forummain.php中$userid未过滤进入sql语句 第17行到32行 function inlist parent::startpagetemplate; parent::memberpurview0, $this-mlink'orderlist'; includeonce adminROOT . 'public/classpagebotton.php'; $lng = adminLNG == 'big5' ? $this-CON'islancode' : adminLNG; $page =...