Application-Level Denial of Service in Concrete CMS Composer Autosave Endpoint via Unbounded Input in ptComposer Parameters
Credits:
Pranav Jayan (https://github.com/progprnv) ...
Tested On:
progprnv
/ CONCRETECMS [Composer Autosave] App-Level DoS via ptComposer Parameters.md
Last active
August 3, 2025 11:39
CONCRETECMS CVE
progprnv
/ SOURCECODESTER [FAQ Management System Using PHP and MySQL] XSS on add-faq.php.md
Last active
August 7, 2025 15:49
Credits:
Pranav Jayan (https://github.com/progprnv)
Tested On:
Affected Version:
FAQ Management System Using PHP and MySQL 1.0
progprnv
/ Stored Cross-Site Scripting (XSS) in Rhymix CMS.md
Created
August 7, 2025 16:01
Credits:
Pranav Jayan (https://github.com/progprnv)
progprnv
/ Weak Password Enforcement on Microweber Reset Password Flow.md
Last active
August 31, 2025 06:23
Credits: Discovered by Pranav Jayan (https://github.com/progprnv)
Tested On:
-- Live website https://microweber.com, all deployed versions as of August 2025
-- Microweber CMS GitHub Link: https://github.com/microweber/microweber
Affected Version: Microweber: Drag-and-Drop CMS, Current version: 2.0 running on Laravel 10