admintools vulnerabilities and exploits

(subscribe to this query)

NA

Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Nijskens Raf Admintools -

NA

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

Nijskens Raf Admintools

6.5

CVSSv3

Under certain conditions, BOE AdminTools/ BOE SDK allows an malicious user to access information which would otherwise be restricted.

Sap Business Objects Business Intelligence Platform 430 Sap Business Objects Business Intelligence Platform 420

4.8

CVSSv3

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_search

Wbce Wbce Cms 1.1.11

NA

Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and previous versions allows remote malicious users to inject and execute arbitrary PHP code via the filename and text parameters.

Ohloh Agoko Cms

1 EDB exploit

9.6

CVSSv3

AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an malicious user to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.

Sap Businessobjects Business Intelligence 4.1 Sap Businessobjects Business Intelligence 4.2

6.1

CVSSv3

SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an malicious user to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

Sap Businessobjects Business Intelligence Platform 4.1 Sap Businessobjects Business Intelligence Platform 4.2

7.5

CVSSv3

In SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools, leading to a high impact on availability.

Sap Businessobjects Business Intelligence Platform 420 Sap Businessobjects Business Intelligence Platform 430

6.1

CVSSv3

Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow malicious users to insert persistent JavaScript code that gets reflected back to...

Websitebaker Websitebaker 2.10.0

NA

Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote malicious users to inject arbitrary web script or HTML via the (1) QUERY_STRING to wb/admin/admintools/tool.php or (2) section_id parameter to edit_module_files.php, (3) news/add_post.php, (4) ...

Websitebaker Websitebaker 2.8.3

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook