CVE-2025-66301: Improper Authorization

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/pagename, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through...

EUVD-2018-13111

Malware in sbrugna...

EUVD-2006-3609

Malware in sbrugna...

CVE-2018-20557

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the pagename parameter...

CVE-2018-20557

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the pagename parameter...

SQL injection vulnerability in the page_name parameter of the page.php page of the UX365 navigation system.

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system page.php page pagename parameter SQL...

Telmanik CMS Press 1.01b (pages.php, page_name param) - SQL Injection

No description provided by source. x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg...

Telmanik CMS Press 1.01b - SQL Injection

Exploit for php platform in category web applications http://site.org/themes/pages.php?pagename=SQLi you have to formate you injection like so: unionselectrowfromtable Replacing spaces with ��. Ex: http://site.org/themes/pages.php?pagename=unionselectpasswordfrommembers 0day.today 2018-01-02...

CVE-2006-3614

index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the pagename parameter, possibly due to a SQL injection vulnerability...