CVE-2025-50754-PoC

CVE-2025-50754 De XSS Almacenado a Ejecución Remota de Código en una Plataforma CMS Basada en PHP Resumen Una plataforma CMS basada en PHP versión 5 contiene una vulnerabilidad de Cross-Site Scripting XSS almacenado en la función "Reporte". Cuando un administrador visualiza un reporte enviado por...

CVE-2025-41089

CVE-2025-41089: XSS Reflejado en Xibo CMS He descubierto una vulnerabilidad de Cross-Site Scripting XSS Reflejado en Xibo CMS v4.1.2. Este problema se origina por la falta de saneamiento adecuado de la entrada proporcionada por el usuario en el campo 'Configuration Name' de ciertos widgets dentro...

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad crítica en givanz Vvveb 1.0.5. La vulnerabilidad permite a un usuario autenticado con privilegios de edición de plantillas escribir código PHP arbitrario en archivos del servidor, lo que...

CVE-2026-100372

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

EUVD-2026-87315

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2026-100372

ClipBucket v5 versions prior to 5.5.3-#197 are vulnerable to a path traversal vulnerability within the admin template editor. Authenticated users with manage_template_access permissions can exploit the folder parameter by providing directory traversal sequences to move outside the layout director...

CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

PT-2026-99100

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-197 Description A path traversal issue exists in the admin template editor. Authenticated administrators with manage template access permission can use directory traversal sequences in the folder parameter to...

PT-2026-81294

Name of the Vulnerable Software and Affected Versions YOOtheme Pro versions 1.0.0 through 5.0.41 Description A missing access check allows authenticated users with com template editing permissions to access information about arbitrary modules, even if they lack the required com modules permission...

CVE-2026-71232

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-71232

CVE-2026-71232 concerns MacCMS10: specifically, the admin template editor (application/admin/controller/Template.php) had a blacklist-based filter that failed to block several PHP functions (exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, e...

CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-71232

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog. Combined...

PT-2026-68098

Name of the Vulnerable Software and Affected Versions MacCMS10 affected versions not specified Description The admin template editor in application/admin/controller/Template.php uses a blacklist regex to block dangerous PHP functions in template content. However, the blacklist fails to include...

CVE-2026-71232: Improper Control of Generation of Code

MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...

CVE-2026-61343 LibreBooking path traversal

LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0...

LibreBooking path traversal

RISK EVALUATION LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. 2. RECOMMENDED...

PT-2026-56903

Name of the Vulnerable Software and Affected Versions LibreBooking versions prior to 5.1.0 Description The email template editor save action allows a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. This occurs because the...

CVE-2026-61343: Relative Path Traversal

LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0...