PT-2026-96760

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking get page content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary...

CVE-2024-7899

A vulnerability, which was classified as critical, has been found in InnoCMS 0.3.1. This issue affects some unknown processing of the file /panel/pages/1/edit of the component Backend. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed t...

InnoCMS 代码注入漏洞

InnoCMS is a lightweight enterprise official website system from InnoCMS, Inc. A code injection vulnerability exists in InnoCMS version 0.3.1, which stems from the fact that some unknown handling of the file /panel/pages/1/edit can lead to code injection...

CVE-2024-7899: Improper Control of Generation of Code

A vulnerability, which was classified as critical, has been found in InnoCMS 0.3.1. This issue affects some unknown processing of the file /panel/pages/1/edit of the component Backend. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed t...

PT-2024-38670

Name of the Vulnerable Software and Affected Versions InnoCMS version 0.3.1 Description A critical issue has been found in the Backend component, specifically affecting the file "/panel/pages/1/edit". This issue leads to code injection and can be initiated remotely. The vendor was contacted about...

CVE-2018-16624

panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...

PT-2019-9359

Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue allows for XSS via the title of a new page, specifically affecting the 'panel/pages/home/edit' endpoint. Recommendations For version 2.5.12, update to a newer version that contains a fix for this issu...

CVE-2018-16624: Improper Neutralization of Input During Web Page Generation

panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page...

[SECURITY] Fedora 21 Update: drupal7-ctools-1.7-1.fc21

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it includ...

[SECURITY] Fedora 17 Update: drupal7-ctools-1.3-1.fc17

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

[SECURITY] Fedora 18 Update: drupal6-ctools-1.10-1.fc18

This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pa ges. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. For the moment, it...

Fedora Update for drupal7-ctools FEDORA-2012-4881

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2012-4881 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

SA-CONTRIB-2012-054 - Chaos tool suite - Cross Site Scripting (XSS)

CVE: CVE-2012-2082 This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. The...

SA-2008-008 - Meta tags - Arbitrary code execution

The Meta tags module, also known as Nodewords, adds HTML META tags to node, panel and view pages. If the site is configured to allow images in the body of any node type, any user that can create this node type is able to execute arbitrary code on the server. Versions affected Meta tags for Drupal...