repository icon
slackero / phpwcms Project repository

Flexible, fast, powerful, customer, developer friendly web content management system and cms framework

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN2 DAYS

FIX

WITHIN2 DAYS

Leaked 'logintoken' Allows Attacker to Bruteforce Login Page
0xsu3ks
informative
High
Stored Cross Site Scripting (XSS) via File Upload
okankurtuluss
not applicable
Blind SSRF on the RSS Feed
mike993
not applicable
Remote Code Execution due to code injection
taiyou-tw
Critical
•$6
Forced Browsing
thelabda
Medium
•$25
Forced Browsing
thelabda
Medium
Session Fixation
thelabda
Medium
•$25
SQL Injection
rohit75033
Medium
•$25
Cross-site Scripting (XSS) - Reflected
rohit75033
Medium
•$25
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
melbinkm
Medium
•$25
Sensitive Cookie Without 'HttpOnly' Flag
melbinkm
Medium
•$25
Cross-site Scripting (XSS) - Stored
ranjit-git
High
•$25
Open Redirect
bauh0lz
High
•$25