CVE-2025-7138

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. Th...

SourceCodester Best Salon Management System 安全漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. A security vulnerability exists in SourceCodester Best Salon Management System version 1.0, which originates from an incorrect manipulation of the parameter Admin Name in the file...

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. SourceCodester Best Salon Management System version 1.0 suffers from an injection vulnerability that stems from improper handling of the parameter adminname in the file /panel/admin-profile.php,...

PT-2023-23592 · Wings · Wings

Name of the Vulnerable Software and Affected Versions: Wings versions prior to 1.7.5 Wings versions 1.11.0 through 1.11.5 Description: The issue affects Wings, allowing attackers to gain access to the host system if they can modify a server's install script or if the install script executes code...

CVE-2021-41878

A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...

Smoke Loader LFI / File Deletion

Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET http://evilserver.net/control.php?act=dwnshell&file=../../../../etc/passwd Enter username for Who are you? at evilsite.net:80:eviladmin Password:...

E-brand CMS Vuln SQL injection Vulnerability

Exploit for multiple platform in category web applications Exploit Title: E-brand CMS Vuln SQL injection Vulnerability Vendor: http://www.ebrand.com.br/ Author: xDarkSton3x E-mail : email protected Twitter: @xdarkston3x Category: webapps Google dork: intext:desenvolvido por e-brand Example Sites ...

Recipe Script 5.0 - Arbitrary File Upload / Cross-Site Request Forgery / Cross-Site Scripting

----------------------------------------------------------------------------------------------- Title: Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16. December 2009...