CVE-2026-41128: Missing Authorization

Craft CMS is a content management system CMS. In versions 5.6.0 through 5.9.14, the actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no...

CVE-2026-41128

Craft CMS is a content management system CMS. In versions 5.6.0 through 5.9.14, the actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no...

GHSA-JQ2F-59PJ-P3M3 Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

PT-2026-35119

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

Linux Distros Unpatched Vulnerability : CVE-2014-4987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and rea...

PT-2022-18260

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.2 Description The issue is related to SQL Injection via the cszcms admin Users viewUsers endpoint. This allows for potential unauthorized access to sensitive data. No information is provided about the estimated number of...

PT-2022-18257

Name of the Vulnerable Software and Affected Versions Csz Cms version 1.2.2 Description The issue is related to SQL Injection via the cszcms admin Members viewUsers function. This allows for potential unauthorized access to sensitive data. Recommendations For Csz Cms version 1.2.2, as a temporary...

Design/Logic Flaw

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

UBUNTU-CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

CVE-2014-4987

CVE-2014-4987 affects phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6, allowing remote authenticated users to bypass access restrictions and read the MySQL user list via a viewUsers request. Affected products are phpMyAdmin components handling user views; root cause is improper access con...

CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

CVE-2014-4987

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

CVE-2014-4987: Undefined Security Weakness

serverusergroups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers request...

AutositePHP 2.0.3 (LFI/CSRF/Edit File) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== AutositePHP 2.0.3 LFI/CSRF/Edit File Multiple Remote Vulnerabilities ====================================================================== + AutositePHP v2.0.3...