CVE-2025-10352 Missing Authorization vulnerability in Melis Platform

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

CVE-2025-10351 SQL injection vulnerability in Melis Platform

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

CVE-2025-10351

Melis Platform (melis-cms) is affected by a SQL injection in the idPage parameter of the /melis/MelisCms/PageEdition/getTinyTemplates endpoint. The vulnerability allows an attacker to retrieve, create, update, or delete database records. The exposed component is melis-cms within Melis Platform; r...

CVE-2025-10351 SQL injection vulnerability in Melis Platform

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

Melis Platform 安全漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform, which originates in the melis-core module and allows an unauthenticated attacker to create an administrator account by requesting...

PT-2025-41245

Name of the Vulnerable Software and Affected Versions Melis Platform affected versions not specified Description A flaw exists in the melis-core module that allows an unauthenticated attacker to create an administrator account. This is achieved by sending a request to the...

Melis Platform 安全漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform, which stems from a flaw in the file upload functionality of the melis-cms-slider module that could lead to remote code execution...

Melis Platform SQL注入漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A SQL injection vulnerability exists in Melis platform, which stems from insufficient validation of the idPage parameter and could lead to a SQL injection attack...

EUVD-2022-7045

Malicious code in bioql PyPI...

Exploit for CVE-2025-10351

CVE-2025-10351 POC - SQL Injection Exploit 💉 POC for CVE-20...

CVE-2022-39298

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of...

Authentication flaw

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of...

CVE-2022-39298 Deserialization of untrusted data in MelisFront

MelisFront is the engine that displays website hosted on Melis Platform. It deals with showing pages, plugins, URL rewritting, search optimization and SEO, etc. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of...

CVE-2022-39298

MelisFront (melis-front) on Melis Platform contains a deserialization of untrusted data vulnerability that enables arbitrary PHP code execution. The issue affects affected versions of melisplatform/melis-front and can be exploited without authentication. The root cause is deserializing user-contr...

Melis Platform 代码问题漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform MelisCms versions prior to 5.0.1 that stems from the ability to deserialize arbitrary data on melisplatform/melis-cms and ultimately lead to the...

CVE-2022-39297 Deserialization of untrusted data in MelisCms

MelisCms provides a full CMS for Melis Platform, including templating system, drag'n'drop of plugins, SEO and many administration tools. Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-cms, and ultimately leads to the execution of arbitrary PHP code on the...

Melis Platform 路径遍历漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A path traversal vulnerability exists in Melis Platform MelisAssetManager. An attacker exploiting this vulnerability could read arbitrary files, which could lead to the disclosure of sensitive...

CVE-2022-39296 Path traversal in MelisAssetManager

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require...