100 matches found
CVE-2023-26948
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download...
OneKeyAdmin 安全漏洞
OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applets, malls, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! OneKeyAdmin v1.3.9 version of a security vulnerability , the vulnerability stems from the existence of...
CVE-2023-26956
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...
CVE-2023-26952
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Menu module...
CVE-2023-26952
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Menu module...
CVE-2023-26950
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
CVE-2023-26950
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
Cross site scripting
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
PT-2023-20874
Name of the Vulnerable Software and Affected Versions onekeyadmin version 1.3.9 Description The issue is related to an arbitrary file read vulnerability. It affects the component "/admin1/curd/code". Recommendations For onekeyadmin version 1.3.9, consider restricting access to the...
CVE-2023-26950
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
CVE-2023-26956: Files or Directories Accessible to External Parties
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...
CVE-2023-26950: Improper Neutralization of Input During Web Page Generation
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
CVE-2023-26952
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Menu module...
CVE-2023-26956
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...
CVE-2023-26956
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code...
OneKeyAdmin 安全漏洞
OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applets, malls, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! OneKeyAdmin v1.3.9 version of the existence of security vulnerabilities , the vulnerability stems from the...
CVE-2023-26952
CVE-2023-26952 affects OneKeyAdmin v1.3.9, with a stored cross-site scripting (XSS) vulnerability exposed through the Add Menu module. Multiple connected sources corroborate a stored XSS issue in OneKeyAdmin v1.3.9 but do not provide concrete details on root cause beyond the Add Menu vector, impa...
CVE-2023-26950
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Title parameter under the Adding Categories module...
OneKeyAdmin 跨站脚本漏洞
OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applets, malls, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! A security vulnerability exists in OneKeyAdmin v1.3.9, which stems from a stored cross-site scripting XSS...