Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2023-26951
Disclosure Date: March 16, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
0
Attacker Value
Unknown
CVE-2023-26957
Disclosure Date: March 09, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
0
Attacker Value
Unknown
CVE-2023-26948
Disclosure Date: March 09, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
0
Attacker Value
Unknown
CVE-2023-26956
Disclosure Date: March 08, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
0
Attacker Value
Unknown
CVE-2023-26952
Disclosure Date: March 08, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.
0
Attacker Value
Unknown
CVE-2023-26950
Disclosure Date: March 08, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
0
Attacker Value
Unknown
CVE-2023-26953
Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
0
Attacker Value
Unknown
CVE-2023-26955
Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.
0
Attacker Value
Unknown
CVE-2023-26954
Disclosure Date: March 07, 2023 (last updated February 24, 2025)
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.
0
Attacker Value
Unknown
CVE-2023-26949
Disclosure Date: March 06, 2023 (last updated February 24, 2025)
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
0
