pfsense-timezone-phpini

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-timezone-phpini pfsense-timezone-phpini Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.php writes $POST'timezone' with no inarray against systemgettimezonelist. istimezone...

CVE-2026-112033

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033

A security flaw exists in aircheng-org iWebShop-5 up to version 5.16 . The vulnerability is located in the Password Change component, specifically within the admin_repwd/admin_repwd_act function of the controllers/system.php file. By manipulating the password/repassword arguments, an attacker can...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

EUVD-2026-104026

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033: Cross-Site Request Forgery (CSRF)

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2018-25207: Improper Neutralization of Special Elements used in an SQL Command

Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands. Attackers can submit malicious POST requests to quiz-system.php or add-category.php with crafted SQL payloads in POST parameters to...

CVE-2026-4623 DefaultFuction Jeson-Customer-Relationship-Management-System API Module System.php server-side request forgery

A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file /api/System.php of the component API Module. The manipulation of the argument url leads to...

EUVD-2007-5622

Malware in sbrugna...

EUVD-2018-6851

Malware in sbrugna...

PT-2025-3936 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A vulnerability has been found in the code and classified as problematic. This issue affects unknown code of the file / parse/ feedback system.php. The manipulation of the type argument...

CVE-2024-7917 DouPHP Favicon system.php unrestricted upload

A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component Favicon Handler. The manipulation of the argument sitefavicon leads to unrestricted upload. The...

PT-2024-38684

Name of the Vulnerable Software and Affected Versions DouPHP version 1.7 Release 20220822 Description A critical issue has been found in the Favicon Handler component of DouPHP, affecting some unknown functionality of the file /admin/system.php. The manipulation of the site favicon argument leads...

CVE-2016-15022 mosbth cimage check_system.php cross site scripting

A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file checksystem.php. The manipulation of the argument $SERVER'SERVERSOFTWARE' leads to cross site scripting. The attack can be launched...

PT-2021-9092

Name of the Vulnerable Software and Affected Versions OpenRepeater versions prior to 2.2 Description The issue allows unauthenticated command injection via shell metacharacters in the post service parameter of the "functions/ajax system.php" API endpoint. Recommendations For versions prior to 2.2...

CVE-2018-19465

Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...

CVE-2018-19465

CVE-2018-19465 affects Maccms up to version 8.0, allowing Cross-Site Scripting (XSS) via the site_keywords field used in index.php?m=system-config. The root cause is tied to template files: tpl/module/system.php and tpl/html/system_config.html, with related references to template/paody/html/vod_i...

PT-2019-9825

Name of the Vulnerable Software and Affected Versions Maccms versions through 8.0 Description The issue allows for XSS via the site keywords field to "index.php?m=system-config" because of vulnerabilities in tpl/module/system.php and tpl/html/system config.html, related to template/paody/html/vod...