115 matches found
CVE-2026-111916
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916 Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916 Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
EUVD-2026-103305
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
CVE-2026-111916
Admidio versions prior to 5.0.16 are susceptible to an information disclosure vulnerability within the rss/links.php component. The root cause is the omission of the category_view role-visibility filter, which allows unauthenticated attackers to bypass role restrictions. By requesting the organiz...
CVE-2026-111916: Missing Authorization
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the categoryview role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names...
SUSE CVE-2024-43365
Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...
EUVD-2008-6236
Malware in sbrugna...
EUVD-2005-1806
Malware in sbrugna...
EUVD-2008-0818
Malware in sbrugna...
CVE-2024-43364
Cacti is an open source performance and fault management framework. The title parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users wit...
CVE-2024-43365
Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...
CVE-2024-43364
Cacti is an open source performance and fault management framework. The title parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users wit...
CVE-2024-43362
Cacti is an open source performance and fault management framework. The fileurl parameter is not properly sanitized when saving external links in links.php . Morever, the said fileurl is placed in some html code which is passed to the print function in link.php and index.php, finally leading to...
CVE-2024-43365: Improper Neutralization of Input During Web Page Generation
Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...
CVE-2024-43364: Improper Neutralization of Input During Web Page Generation
Cacti is an open source performance and fault management framework. The title parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users wit...
CVE-2024-43362: Improper Neutralization of Input During Web Page Generation
Cacti is an open source performance and fault management framework. The fileurl parameter is not properly sanitized when saving external links in links.php . Morever, the said fileurl is placed in some html code which is passed to the print function in link.php and index.php, finally leading to...
PT-2020-14140
Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description The issue allows for cross-site scripting XSS attacks via the administration/site links.php Add Site Link field. Recommendations For PHP-Fusion version 9.03.60, update to a version that includes a fix for...