CVE-2023-53902

CVE-2023-53902 affects WebsiteBaker 2.13.3 with a directory traversal vulnerability in the /admin/media/delete.php endpoint. An authenticated attacker can delete arbitrary files by manipulating directory path parameters, exploiting traversal sequences to access files outside the intended director...

PT-2025-51751

Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.13.3 Description WebsiteBaker version 2.13.3 has a stored cross-site scripting issue. Authenticated users can upload malicious SVG files containing JavaScript. Uploading crafted SVG files with script tags allows for...

websitebaker 安全漏洞

websitebaker is a PHP-based content management system for individual developers. Its features include template-based front-end interface, paging support, multi-user management, etc. WebsiteBaker 2.13.3 has a security vulnerability that originates from a directory traversal vulnerability. A securi...

websitebaker 安全漏洞

websitebaker is a PHP-based content management system for individual developers. Its features include template-based front-end interface, paging support, multi-user management, etc. The vulnerability is caused by a stored cross-site scripting vulnerability. A security vulnerability exists in...

PT-2025-51750

Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.13.3 Description WebsiteBaker version 2.13.3 has a directory traversal issue. Authenticated attackers can delete arbitrary files by manipulating directory path parameters. This is achieved by sending crafted GET requests...

EUVD-2011-2903

Malware in sbrugna...

EUVD-2011-3348

Malware in sbrugna...

EUVD-2011-2902

Malware in sbrugna...

EUVD-2020-18620

Malware in sbrugna...

EUVD-2011-4254

Malware in sbrugna...

EUVD-2017-18296

Malware in sbrugna...

EUVD-2017-18295

Malware in sbrugna...

EUVD-2015-0566

Malware in sbrugna...

EUVD-2014-9067

Malware in sbrugna...

EUVD-2017-16434

Malware in sbrugna...

EUVD-2014-9068

Malware in sbrugna...

EUVD-2017-7708

Malware in sbrugna...

EUVD-2017-18701

Malware in sbrugna...

📄 WebsiteBaker 2.13.7 r164 Command Injection

WebsiteBaker version 2.13.7 r164 suffers from an authenticated command injection vulnerability. Exploit Title: WebsiteBaker 2.13.7 r164 Command Injection Authenticated Exploit Author: tmrswrr /Hulya KARABAG Vendor Homepage: https://forum.websitebaker.org/ Software Link:...

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...