WS-2022-0307

Pageflow has a membership edit feature which allows users to edit the roles of user memberships associated with an account that they have the manager role to including their own. While the Entity dropdown select field is greyed out in the UI, an attacker can use tools which allow sending arbitrar...

CVE-2024-40482

An Unrestricted file upload vulnerability was found in "/Membership/editmember.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file...

WS-2022-0306

Pageflow has a membership edit feature which allows users to edit the roles of user memberships associated with an account that they have the "manager" role to including their own. While the "Entity" dropdown select field is greyed out in the UI, an attacker can use tools which allow sending...