CVE-2026-41128

Craft CMS is a content management system CMS. In versions 5.6.0 through 5.9.14, the actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no...

GHSA-JQ2F-59PJ-P3M3 Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

Linux Distros Unpatched Vulnerability : CVE-2014-4987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and rea...

UBUNTU-CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

Design/Logic Flaw

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

CVE-2014-4987

CVE-2014-4987 affects phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6, allowing remote authenticated users to bypass access restrictions and read the MySQL user list via a viewUsers request. Affected products are phpMyAdmin components handling user views; root cause is improper access con...

CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

AutositePHP 2.0.3 (LFI/CSRF/Edit File) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== AutositePHP 2.0.3 LFI/CSRF/Edit File Multiple Remote Vulnerabilities ====================================================================== + AutositePHP v2.0.3...