EVIL0RD

LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint

LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url

MaxSite CMS through 109.6 PHP Object Injection via ci_session

MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page