administrate vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and previous versions allows remote malicious users to hijack the user's OAuth autorization code.

* Administrate Thoughtbot Administrate

In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the `direction` parameter and...

Thoughtbot Administrate

Nextcloud Server is a Nextcloud package that handles data storage. In versions of Nextcloud Server before 10.0.11, 20.0.10, and 21.0.2, a malicious user may be able to break the user administration page. This would disallow administrators to administrate users on the Nextcloud in...

Nextcloud Security-advisories Nextcloud Nextcloud Server

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote malicious users to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.

Phppgadmin Phppgadmin 3.1 Phppgadmin Phppgadmin 3.2 Phppgadmin Phppgadmin 3.3 Phppgadmin Phppgadmin 3.4 Phppgadmin Phppgadmin 3.4.1 Phppgadmin Phppgadmin 3.5.3

1 EDB exploit

Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote malicious users to inject arbitrary web script or HTML via the server parameter.

Phppgadmin Phppgadmin 4.1.1

1 EDB exploit

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and previous versions, when register_globals is enabled, allows remote malicious users to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Phppgadmin Phppgadmin Phppgadmin Phppgadmin 2.2 Phppgadmin Phppgadmin 2.2.1 Phppgadmin Phppgadmin 3.1 Phppgadmin Phppgadmin 3.4.1 Phppgadmin Phppgadmin 3.5 Phppgadmin Phppgadmin 3.5.2 Phppgadmin Phppgadmin 3.5.3 Phppgadmin Phppgadmin 4.1.1

1 EDB exploit

phpMyAdmin prior to 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote malicious users to conduct spoofing or phishing activities via a cross-site framing attack.

Phpmyadmin Phpmyadmin Phpmyadmin Phpmyadmin 2.0 Phpmyadmin Phpmyadmin 2.0.0 Phpmyadmin Phpmyadmin 2.0.1 Phpmyadmin Phpmyadmin 2.0.2 Phpmyadmin Phpmyadmin 2.0.3 Phpmyadmin Phpmyadmin 2.0.4 Phpmyadmin Phpmyadmin 2.0.5 Phpmyadmin Phpmyadmin 2.1 Phpmyadmin Phpmyadmin 2.1.0 Phpmyadmin Phpmyadmin 2.1.1 Phpmyadmin Phpmyadmin 2.1.2

libraries/database_interface.lib.php in phpMyAdmin prior to 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.

Phpmyadmin Phpmyadmin Phpmyadmin Phpmyadmin 2.0 Phpmyadmin Phpmyadmin 2.0.0 Phpmyadmin Phpmyadmin 2.0.1 Phpmyadmin Phpmyadmin 2.0.2 Phpmyadmin Phpmyadmin 2.0.3 Phpmyadmin Phpmyadmin 2.0.4 Phpmyadmin Phpmyadmin 2.0.5 Phpmyadmin Phpmyadmin 2.1 Phpmyadmin Phpmyadmin 2.1.0 Phpmyadmin Phpmyadmin 2.1.1 Phpmyadmin Phpmyadmin 2.1.2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote malicious users to inject arbitrary web script or HTML via certain input available in PHP_SELF in (1) redirect.php, possibly related to (2) login.php, different vectors than CVE...

Phppgadmin Phppgadmin 3.5 Phppgadmin Phppgadmin 3.5.2 Phppgadmin Phppgadmin 3.5.3 Phppgadmin Phppgadmin 4.1.1

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x prior to 2.11.9.4 and 3.x prior to 3.1.1.0 allows remote malicious users to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: oth...

Phpmyadmin Phpmyadmin 2.11.0 Phpmyadmin Phpmyadmin 2.11.0.0 Phpmyadmin Phpmyadmin 2.11.1 Phpmyadmin Phpmyadmin 2.11.1.0 Phpmyadmin Phpmyadmin 2.11.1.1 Phpmyadmin Phpmyadmin 2.11.1.2 Phpmyadmin Phpmyadmin 2.11.2 Phpmyadmin Phpmyadmin 2.11.2.0 Phpmyadmin Phpmyadmin 2.11.2.1 Phpmyadmin Phpmyadmin 2.11.2.2 Phpmyadmin Phpmyadmin 2.11.3 Phpmyadmin Phpmyadmin 2.11.3.0

1 EDB exploit

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook