10 matches found
CVE-2026-37072
CVE-2026-37072 Проект Veno File Manager Project версии 4.4.9 уязвим к некорректному контролю доступа в admin-head-updates.php Неаутентифицированный злоумышленник может использовать уязвимость локального включения файлов Local File Inclusion в параметре GET 'lang'. Отправив специально сформированн...
CVE-2026-37072
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...
CVE-2026-37072
Veno File Manager Project 4.4.9 is vulnerable to an Incorrect Access Control flaw in admin-head-updates.php, specifically a Local File Inclusion via the lang GET parameter. An unauthenticated attacker can send a specially crafted POST request to corrupt the configuration file, then hit the setup ...
CVE-2026-37072
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...
CVE-2023-52257
LogoBee 0.2 allows updates.php?id= XSS...
CVE-2023-52257
LogoBee 0.2 allows updates.php?id= XSS...
Cross site scripting
LogoBee 0.2 allows updates.php?id= XSS...
CVE-2023-52257
CVE-2023-52257 affects LogoBee 0.2 with a cross‑site scripting vulnerability in the updates.php?id= endpoint. The root cause is unsafe handling of the id parameter, enabling injected scripts to run in the application's context. Impact: XSS that can affect users interacting with the update interfa...
