361,800
Total CVEs
26,223
Critical
85,816
High
1,626
CISA KEV
1,557
This Week
4 results · Page 1/1
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.
maianmedia
A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.
maianmedia
MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.
maianaffiliate
MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.
maianmedia