CVE-2026-86753: Incorrect Authorization

snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/assetmodel/modelId endpoint. Authenticated users can bypass administrative restrictions and create checkout requests for non-requestable asset models by submitting requests directly ...

EUVD-2011-0662

Malware in sbrugna...

cars.com XSS vulnerability

Open Bug Bounty ID: OBB-126595 Description| Value ---|--- Affected Website:| cars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2011-0644

SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...

CVE-2011-0644

SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...

CVE-2011-0644: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...

phpCMS 2008 - SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...