All issues

Search results

Server-side request forgery (SSRF) vulnerability

Status: Open.

#805 In gleez/cms;

· LioTree opened on Feb 13, 2021

There was an error in the local installation, just like the demo you provided.

Status: Open.

#804 In gleez/cms;

· yundiao opened on Apr 1, 2019

Application is vulnerable to clickjacking attack

Status: Open.

#803 In gleez/cms;

· natstheway opened on Sep 7, 2018

Unauthenticated user enumeration and Possible account brute force leading to account compromise

Status: Open.

#802 In gleez/cms;

· natstheway opened on Sep 7, 2018

Insecure Direct Object Reference - View other user profiles

Status: Open.

#801 In gleez/cms;

· natstheway opened on Sep 7, 2018

There is a CSRF vulnerability that can add the administrator account

Status: Open.

#800 In gleez/cms;

· Rambo-996 opened on Aug 10, 2018

There is a XSS vulnerability that can execute javascript

Status: Open.

#798 In gleez/cms;

· coalzhao opened on Aug 9, 2018

Stored XSS in profile page

Status: Open.

#797 In gleez/cms;

· ghost opened on Jul 18, 2018

XSS Vulnerability caused by Redactor 3

Status: Open.

#796 In gleez/cms;

· LifeHackerBee opened on Jul 5, 2018

ErrorException [ Warning ]: array_keys() expects parameter 1 to be array, boolean given

Status: Open.

#792 In gleez/cms;

· ghost opened on Jan 4, 2016

LDAP authentication?

Status: Open.

#734 In gleez/cms;

· samwilson opened on May 15, 2014

Request/Response

Status: Open.

#723 In gleez/cms;

· sandeepuno opened on Apr 26, 2014