CVE-2026-92468 microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/indexName and GET /agg/requestStat/indexName/routing path...

CVE-2026-92468

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass in the search-center service. An authenticated attacker can read any Elasticsearch index by supplying the index name in the path variables of POST /search/{indexName} and GET /agg/requestStat/{indexName}/{routing}, with...

EUVD-2026-80706

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/indexName and GET /agg/requestStat/indexName/routing path...

Fiyo CMS SQL Injection Vulnerability (CNVD-2018-00248)

Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the /apps/appuser/sysuser.php file in Fiyo CMS version 2.0.7. A remote attacker can exploit this vulnerability to elevate user privileges to administrator privileges...

Delivering Digital Media CMS SQL Injection

Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQL Injection Vulnerability ! Author ...

Delivering Digital Media CMS - SQL Injection

Delivering Digital Media CMS - SQL Injection Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital...

Delivering Digital Media CMS - SQL Injection

Title: Delivering Digital Media CMS SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A N.A.S.T ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Delivering Digital Media CMS SQL Injection Vulnerability ! Author ...

[ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability

.OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...