57 matches found
CVE-2026-65931: Missing Authorization
LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...
CVE-2026-6983: Server-Side Request Forgery (SSRF)
A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file /index.php/admin/system/update/download. The manipulation of the argument url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit i...
EUVD-2020-23090
Malware in sbrugna...
EUVD-2018-10850
Malware in sbrugna...
CVE-2024-11489: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown function of the file /index.php/admin/web/file.html. The manipulation of the argument ks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...
CVE-2024-11491: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the argument ks leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-11490: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the argument type leads to cross site scripting. The attack can be launched remotely...
CVE-2024-45967
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
CVE-2024-45967
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
CVE-2024-45967
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
CVE-2024-45967: Improper Neutralization of Input During Web Page Generation
Pagekit 1.0.18 is vulnerable to Cross Site Scripting XSS in index.php/admin/site/widget...
CVE-2024-8144: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...
CVE-2020-18413: Improper Neutralization of Input During Web Page Generation
Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...
CVE-2020-18414: Improper Neutralization of Input During Web Page Generation
Stored cross site scripting XSS vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset...
CVE-2022-30776: Improper Neutralization of Input During Web Page Generation
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
CVE-2021-31731: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter...
CVE-2021-38149
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...
CVE-2021-38149
index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...