CVE Vulnerabilities Archive - Page 17033 of 18763

CVE-2022-28118

February 23, 2023 by godfreyd94

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.

CVE-2022-28116

February 23, 2023 by godfreyd94

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.

CVE-2022-28115

February 23, 2023 by godfreyd94

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.

CVE-2022-28114

February 23, 2023 by godfreyd94

DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php.

CVE-2022-28113

February 23, 2023 by godfreyd94

An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie.