CVE-2026-52771 YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage interpolates a page tag retrieved from the database into a DELETE FROM …links WHERE totag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/tag A...

CVE-2026-52771 YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage interpolates a page tag retrieved from the database into a DELETE FROM …links WHERE totag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/tag A...

PT-2025-17913

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A security issue was found in Moodle where confidential information that prevents cross-site request forgery CSRF attacks was shared publicly through the site's URL. This issue occurred...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of the cross-site request forgery vulnerability , the vulnerability stems from admin/adminpage.php?linkid=1&mode=delete does not adequately verify that the request is from a trusted user , an attack...

CVE-2024-42624

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

CVE-2024-42624

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

FrogCms 安全漏洞

FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /page/delete/10 was found to contain a cross-site request forgery vulnerability...

CVE-2024-42624: Cross-Site Request Forgery (CSRF)

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

PT-2024-30074 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/page/delete/10" endpoint. Recommendations: For FrogCMS version 0.9.5, as a temporary...

CVE-2024-42624

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/delete/10...

CVE-2022-29683

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/pagedel...

CVE-2022-29683

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/pagedel...

CVE-2022-29683

CVE-2022-29683 affects CSCMS Music Portal System v4.2, with a blind SQL injection vulnerability exposed through the id parameter at /admin.php/Label/page_del. The root cause, as described in multiple records, is missing validation of external input in the SQL statement used by that endpoint. CVSS...

PT-2012-3635

Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This includes deleting users via the user id number to "admin/user/delete", deleting pages vi...

CVE-2012-1897: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via the user id number to admin/user/delete; 2 delete pages via the page id number to admin/page/delete;...

S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns

No description provided by source. 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged fil...

S-CMS 1.1 Insecure Cookie Handling

0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/loginaction.php...

S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns

Exploit for unknown platform in category web applications ================================================================== S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns ================================================================== 0x01 Informations: Name : S-Cms 1.1...

S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete

0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/loginaction.php...

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be...