Filtered by vendor Onekeyadmin Subscriptions
Total 8 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-26951 1 Onekeyadmin 1 Onekeyadmin 2023-03-21 5.4 Medium
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
CVE-2023-26956 1 Onekeyadmin 1 Onekeyadmin 2023-03-17 7.5 High
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
CVE-2023-26957 1 Onekeyadmin 1 Onekeyadmin 2023-03-15 9.1 Critical
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
CVE-2023-26948 1 Onekeyadmin 1 Onekeyadmin 2023-03-15 7.5 High
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
CVE-2023-26953 1 Onekeyadmin 1 Onekeyadmin 2023-03-14 4.8 Medium
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
CVE-2023-26949 1 Onekeyadmin 1 Onekeyadmin 2023-03-13 9.8 Critical
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2023-26950 1 Onekeyadmin 1 Onekeyadmin 2023-03-13 5.4 Medium
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
CVE-2023-26952 1 Onekeyadmin 1 Onekeyadmin 2023-03-13 5.4 Medium
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.