CVE-2023-45881

GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resourcesaddQuickajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response...

CVE-2018-5969: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF exists in Photography CMS 1.0 via clients/resources/ajax/ajaxnewadmin.php, as demonstrated by adding an admin account...