PT-2026-116483

Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groups roles export check in modules/groups-roles/lists show.php omits pdfl, which later runs the pdf export,...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the evalImageTypeValue process. An attacker can inject arbitrary attributes, including event handlers, into the backend list by supplying specially crafted values that are rendered in an image column, leading...

PT-2022-18398

Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Lists.php zhuan. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to...

XDCMS \system\modules\form\lists.php SQL注入

No description provided by source...

cscmsV4 /plugins/vod/controllers/lists.php sql注入漏洞

No description provided by source...

CVE-2011-3195: Improper Input Validation

shared/inc/sql/lists.php in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options...

PT-2014-2139

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.34.1 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options in the shared/inc/sql/lists.php file...

The latest xdcms_v2. 0. 2 0DAY-vulnerability warning-the black bar safety net

Start. In the comments place lists. php file n"; $fields.="".$ value'name'."：n"; $fields.="".$ input-$value'formtype for'." ".$ value'explain'."n"; $fields.="n"; //Whether to display the CAPTCHA if$form'0''iscode'==1 $fields.="n"; $fields.="CAPTCHA:n"; $fields.="n"; $fields.="n";...