PT-2020-13753

Name of the Vulnerable Software and Affected Versions Kordil EDMS versions through 2.2.60rc3 Description The issue allows stored XSS in several PHP files, including users edit.php, users management edit.php, and user management.php. Recommendations For versions through 2.2.60rc3, consider disabli...

CVE-2018-20728

A cross site request forgery CSRF vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php...

CVE-2018-20728

A cross site request forgery CSRF vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php...

PT-2019-10186

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3 Description: A cross site request forgery issue allows remote attackers to escalate privileges. The issue is related to the User-Management.php endpoint. Recommendations: For versions prior to 1.7Cp3, update to...

CVE-2018-20728: Cross-Site Request Forgery (CSRF)

A cross site request forgery CSRF vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php...

CVE-2017-1000428

flatCore-CMS 1.4.6 is vulnerable to reflected XSS in usermanagement.php due to the use of $SERVER'PHPSELF' to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string...

PT-2018-5203

Name of the Vulnerable Software and Affected Versions flatCore-CMS version 1.4.6 Description The issue concerns reflected XSS in the user management.php file due to the use of $ SERVER'PHP SELF' to build links. Additionally, there is a stored XSS vulnerability in the admin log panel, which can be...

PT-2015-5351

Name of the Vulnerable Software and Affected Versions Saurus CMS version 4.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the search parameter to "admin/user management.php...