120 matches found
CVE-2026-77876 Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory
Control Web Panel CWP before webpanelversion 1.16 contains an OS command injection vulnerability in the protecteddirectory user panel module that allows attackers to execute arbitrary commands by submitting unescaped input through the file POST parameter in the acc=deletedp action. Attackers can...
CVE-2026-73696
Control Web Panel CWP before webpanelversion 1.12 contains an execution after redirect vulnerability in the user panel authentication flow CWPUserIndex that allows unauthenticated attackers to bypass authentication by exploiting a missing exit call after a header'Location: ...' redirect. Attacker...
EUVD-2026-115228
Control Web Panel CWP before webpanelversion 1.12 contains an execution after redirect vulnerability in the user panel authentication flow CWPUserIndex that allows unauthenticated attackers to bypass authentication by exploiting a missing exit call after a header'Location: ...' redirect. Attacker...
PT-2026-135491
Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 1.16 Description An OS command injection flaw exists in the protected directory user panel module. The issue occurs when unescaped input is submitted through the file POST parameter in the acc=deletedp actio...
EUVD-2026-71014
phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password. Attackers with session access can submit a PUT request to the user data upda...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
PT-2026-20215
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
The phpgurukul Gym Management System 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to the absence of Anti-CSRF tokens . This flaw specifically affects the /profile.php endpoint within the User Panel's profile update functionality. An attacker can exploit this vulnerability t...
PHPGurukul Gym Management System security vulnerabilities
PHPGurukul Gym Management System is a gym management system developed by PHPGurukul Inc. Version 1.0 of the PHPGurukul Gym Management System has a security vulnerability. This vulnerability stems from the cross-site request forgery feature in the user panel configuration file update function, whi...
CVE-2024-55271: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2024-55271
A Cross-Site Request Forgery CSRF vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint...
CVE-2018-10135
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...
EUVD-2018-2213
Malware in sbrugna...
EUVD-2018-3385
Malware in sbrugna...
EUVD-2017-9073
Malware in sbrugna...
EUVD-2018-3501
Malware in sbrugna...