CVE-2026-51564

CVE-2026-51564 CVE-2026-51564 のセキュリティアドバイザリ 説明 Milk admin =0.9.8 の redirect パラメータに存在する問題により、リモートの攻撃者が細工したリクエストを介してユーザーを任意の外部 URL にリダイレクトさせることが可能です。影響を受けるコンポーネント: App/Route.php、publichtml/index.php 緩和策 本公開時点では、この脆弱性は5か月前に報告されているにもかかわらず、開発者から公式のパッチは提供されていません。更新版がリリースされるまで、管理者は可能な限り影響を受ける redirect...

CVE-2026-51565

CVE-2026-51565 CVE-2026-51565 に関するセキュリティアドバイザリ 説明 Modules/Docs/DocsController.php における Milk admin =0.9.8 のクロスサイトスクリプティング（XSS）脆弱性により、リモートの攻撃者が巧妙に細工されたリクエストの action パラメータを介して、任意の Web スクリプトまたは HTML を注入できる可能性があります。 緩和策 公開時点では、この脆弱性に対する公式パッチは開発者から提供されておらず、私が報告してから5か月が経過しています。更新版がリリースされるまでは、ModSecurity...

EUVD-2026-49638

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

EUVD-2026-49669

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

PT-2026-65311

Name of the Vulnerable Software and Affected Versions Milk admin versions 0.9.8 and earlier Description An issue exists where remote attackers can redirect users to arbitrary external URLs by sending a crafted request. This is caused by improper handling of the redirect parameter. Recommendations...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51564

An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request...

CVE-2026-51565

Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...

CVE-2026-51565

A Cross-site scripting (XSS) vulnerability exists in the Modules/Docs/DocsController.php component of Milk admin versions

PT-2026-65313

Name of the Vulnerable Software and Affected Versions Milk admin versions prior to 0.9.9 Description Cross-site scripting XSS occurs in the Modules/Docs/DocsController.php file. This issue allows remote attackers to inject arbitrary HTML or web scripts through the action parameter in a specially...