Browse CVEs

MEDIUM 5.4 CVE-2023-26951 onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module. Onekeyadmin Mitigation only Fix from $1,6002023-03-16 CRITICAL 9.1 CVE-2023-26957 onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins. Onekeyadmin No fix yet Fix from $2,3002023-03-09 HIGH 7.5 CVE-2023-26948 onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download. Onekeyadmin No fix yet Fix from $1,9502023-03-09 HIGH 7.5 CVE-2023-26956 onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code. Onekeyadmin No fix yet Fix from $1,9502023-03-08 MEDIUM 5.4 CVE-2023-26952 onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module. Onekeyadmin No fix yet Fix from $1,6002023-03-08 MEDIUM 5.4 CVE-2023-26950 onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories mo… Onekeyadmin No fix yet Fix from $1,6002023-03-08 CRITICAL 9.8 CVE-2023-26949 An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a … Onekeyadmin No fix yet Fix from $2,3002023-03-06