adminneo-org/adminneo vulnerabilities (Packagist)
7 vulnerabilities.
-
adminneo-org/adminneoPackagist AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE 6.9 Medium -
adminneo-org/adminneoPackagist AdminNeo SQLite Database-List Drop Arbitrary File Deletion 8.1 High -
adminneo-org/adminneoPackagist AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers 8.2 High -
adminneo-org/adminneoPackagist AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass) 8.2 High -
adminneo-org/adminneoPackagist AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass) 7.2 High -
adminneo-org/adminneoPackagist AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery 6.8 Medium -
adminneo-org/adminneoPackagist AdminNeo: version-cache array injection causes persistent denial of service 7.5 High