Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-23903 | 1 Pearadmin | 1 Pear Admin Think | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent. | |||||
CVE-2021-29378 | 1 Pearadmin | 1 Pear Admin Think | 2024-11-21 | N/A | 8.8 HIGH |
SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php. |