9 matches found
PT-2026-48473
Name of the Vulnerable Software and Affected Versions go-base versions prior to 2026-05-18 Description The JWT signing secret is hardcoded to the string random in the dev.env template and as a programmatic fallback in the cmd/serve.go file. This allows an attacker to forge tokens for any user,...
CVE-2026-38930
OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...
CVE-2026-38930
OpenRapid RapidCMS v1.3.1 has an authentication bypass in /template/default/menu.php. The issue arises from injecting a crafted SQL payload into the name cookie parameter, enabling bypass of authentication. Documentation indicates a network-level vector with low confidentiality/integrity impact (...
PT-2026-44038
Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1 Description An authentication bypass exists in the '/template/default/menu.php' endpoint. This issue occurs when a crafted SQL payload is injected into the name cookie parameter, allowing an attacker to...
OpenRapid RapidCMS 安全漏洞
OpenRapid RapidCMS is a fast, simple, and useful CMS system developed under the OpenRapid open-source framework. Version 1.3.1 of OpenRapid RapidCMS contains a security vulnerability. This vulnerability stems from a flaw in the /template/default/menu.php component, where authentication bypasses a...
CVE-2026-38930
OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter...
CVE-2024-1200
A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /template/1/default/. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and...
PT-2024-17394 · Jspxcms · Jspxcms
Name of the Vulnerable Software and Affected Versions: Jspxcms version 10.2.0 Description: A vulnerability was found in Jspxcms and classified as problematic. It affects some unknown functionality of the file /template/1/default/. The manipulation leads to information disclosure. The attack may b...
