8 matches found
CVE-2026-37072
Veno File Manager Project 4.4.9 contains an Incorrect Access Control vulnerability in admin-head-updates.php. An unauthenticated attacker can exploit a Local File Inclusion flaw in the lang GET parameter by sending a crafted POST request to corrupt the configuration file. A subsequent GET request...
CVE-2026-37072
CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 ist anfällig für eine falsche Zugriffskontrolle in admin-head-updates.php Ein nicht authentifizierter Angreifer kann eine Schwachstelle zur Lokalen Dateieinbindung Local File Inclusion im GET-Parameter 'lang' ausnutzen. Durc...
CVE-2023-52257
LogoBee 0.2 allows updates.php?id= XSS...
CVE-2023-52257
LogoBee 0.2 allows updates.php?id= XSS...
Cross site scripting
LogoBee 0.2 allows updates.php?id= XSS...
CVE-2023-52257
CVE-2023-52257 affects LogoBee 0.2 with a cross‑site scripting vulnerability in the updates.php?id= endpoint. The root cause is unsafe handling of the id parameter, enabling injected scripts to run in the application's context. Impact: XSS that can affect users interacting with the update interfa...
