95 matches found
Code injection
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
Code injection
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
CVE-2023-36984
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
CVE-2023-36983
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
CVE-2023-36984
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
PT-2023-25763 · Unknown · Lavalite Cms
Name of the Vulnerable Software and Affected Versions: LavaLite CMS version 9.0.0 Description: The issue concerns Sensitive Data Exposure. Recommendations: For LavaLite CMS version 9.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2023-36983
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
Lavalite CMS Security Vulnerability
Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...
CVE-2023-36984
CVE-2023-36984 affects LavaLite CMS v9.0.0. The provided documents identify a sensitive data exposure due to lack of access restrictions (no explicit exploit details). Public sources indicate this is a vulnerability in LavaLite CMS 9.0.0 with no confirmed fix in the supplied materials; one entry ...
CVE-2023-36983
LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...
CVE-2023-36983
Technical details about CVE-2023-36983 are not publicly provided in the connected documents. No explicit affected versions, root cause, impact, or remediation are present here. Monitor for updates and additional disclosures.
Cross-Site Scripting (XSS)
lavalite/cms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the account name parameter, which allows an attacker to inject arbitrary JavaScript into the browser...
DNS Rebinding
lavalite/cms is vulnerable to DNS rebinding. The vulnerability exists because it does not properly validate DNS records in the ResourceController class of ResourceController.php, which allows attackers to control the victim's DNS records or spoof their responses...
Host Header Injection
lavalite/cms is vulnerable to host header injection.The vulnerability exists due to a lack of sanitization in the http header...
GHSA-6VCF-CFJP-QXCW LavaLite vulnerable to web cache poisoning
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
LavaLite CMS vulnerable to host header injection attack
LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...
LavaLite vulnerable to web cache poisoning
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
GHSA-94Q4-V5G6-QP7X LavaLite CMS vulnerable to host header injection attack
LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack...
