Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-67165 · ADVISORY
• mbiesiad/vulnerability-research · WEB
• pagekit/docs · WEB
• pagekit/docs · WEB
• pagekit/pagekit · PACKAGE

Lỗ hổng khác của pagekit/pagekit

• CVE-2025-67164NGHIÊM TRỌNG 9.9An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute ar…
• CVE-2024-45967TRUNG BÌNH 4.7Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.
• CVE-2023-41005CAO 7.8An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in U…
• CVE-2022-38916NGHIÊM TRỌNG 9.8A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files
• CVE-2022-36573TRUNG BÌNH 6.1A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted pa…