Show filters
570 Total Results
Displaying 91-100 of 570
Sort by:
Attacker Value
Unknown

CVE-2023-26950

Disclosure Date: March 08, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
Attacker Value
Unknown

CVE-2023-24780

Disclosure Date: March 08, 2023 (last updated February 24, 2025)
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
Attacker Value
Unknown

CVE-2023-24775

Disclosure Date: March 07, 2023 (last updated February 24, 2025)
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
Attacker Value
Unknown

CVE-2023-26953

Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
Attacker Value
Unknown

CVE-2023-24781

Disclosure Date: March 07, 2023 (last updated February 24, 2025)
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
Attacker Value
Unknown

CVE-2023-26955

Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.
Attacker Value
Unknown

CVE-2023-26954

Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.
Attacker Value
Unknown

CVE-2023-26949

Disclosure Date: March 06, 2023 (last updated February 24, 2025)
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
Attacker Value
Unknown

CVE-2023-24776

Disclosure Date: March 06, 2023 (last updated October 08, 2023)
Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.
Attacker Value
Unknown

CVE-2023-24249

Disclosure Date: February 27, 2023 (last updated February 24, 2025)
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.