Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

access:pre-auth — CVE vulnerabilities tagged 18829

18829 CVE security advisories tagged "access:pre-auth" with AI Chinese analysis, CVSS, references and POCs.

CVE IDTitleCVSSSeverityPublished
CVE-2026-2752 Navtor NavBox 安全漏洞 — NavBoxCWE-209 5.3 Medium2026-03-06
CVE-2026-26051 Mobiliti e-mobi.hu Missing Authentication for Critical Function — e-mobi.huCWE-306 9.4 Critical2026-03-06
CVE-2018-25200 OOP CMS BLOG 1.0 Cross-Site Request Forgery via addUser.php — OOP CMS BLOGCWE-352 5.3 Medium2026-03-06
CVE-2018-25199 OOP CMS BLOG 1.0 SQL Injection via search parameter — OOP CMS BLOGCWE-89 8.2 High2026-03-06
CVE-2018-25197 PlayJoom 0.10.1 SQL Injection via catid Parameter — PlayJoomCWE-89 8.2 High2026-03-06
CVE-2018-25196 ServerZilla 1.0 SQL Injection via email Parameter — ServerZillaCWE-89 8.2 High2026-03-06
CVE-2018-25194 Nominas 0.27 SQL Injection via username Parameter — NominasCWE-22 8.2 High2026-03-06
CVE-2018-25192 GPS Tracking System 2.12 SQL Injection via username Parameter — GPS Tracking SystemCWE-89 8.2 High2026-03-06
CVE-2018-25190 Easyndexer 1.0 Cross-Site Request Forgery via createuser.php — EasyndexerCWE-352 5.3 Medium2026-03-06
CVE-2018-25189 Data Center Audit 2.6.2 SQL Injection via username Parameter — Data Center AuditCWE-89 8.2 High2026-03-06
CVE-2018-25188 Webiness Inventory 2.3 SQL Injection via WsModelGrid.php — Webiness InventoryCWE-89 8.2 High2026-03-06
CVE-2018-25187 Tina4 Stack 1.0.3 SQL Injection and Database File Download — Tina4 StackCWE-89 8.2 High2026-03-06
CVE-2018-25186 Tina4 Stack 1.0.3 Cross-Site Request Forgery via profile — Tina4 StackCWE-352 5.3 Medium2026-03-06
CVE-2018-25184 Surreal ToDo 0.6.1.2 Local File Inclusion via index.php — Surreal ToDoCWE-22 6.2 Medium2026-03-06
CVE-2018-25182 Silurus Classifieds Script 2.0 SQL Injection via wcategory.php — Silurus Classifieds ScriptCWE-89 8.2 High2026-03-06
CVE-2018-25181 Musicco 2.0.0 Arbitrary Directory Download via Path Traversal — MusiccoCWE-22 7.5 High2026-03-06
CVE-2018-25179 Gumbo CMS 0.99 SQL Injection via settings endpoint — Gumbo CMSCWE-89 8.2 High2026-03-06
CVE-2018-25178 Easyndexer 1.0 Arbitrary File Download via showtif.php — EasyndexerCWE-22 7.5 High2026-03-06
CVE-2018-25177 Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php — Data Center AuditCWE-352 5.3 Medium2026-03-06
CVE-2018-25176 Alive Parish 2.0.4 SQL Injection and Arbitrary File Upload — Alive ParishCWE-352 8.2 High2026-03-06
CVE-2018-25175 Alienor Web Libre 2.0 SQL Injection via index.php — Alienor Web LibreCWE-89 8.2 High2026-03-06
CVE-2018-25174 ABC ERP 0.6.4 Cross-Site Request Forgery via _configurar_perfil.php — ABC ERPCWE-352 5.3 Medium2026-03-06
CVE-2018-25173 Rmedia SMS 1.0 SQL Injection via editgrp.php — Rmedia SMSCWE-89 8.2 High2026-03-06
CVE-2018-25172 Pedidos 1.0 SQL Injection via load_proveedores.php — PedidosCWE-89 8.2 High2026-03-06
CVE-2018-25171 EdTv 2 SQL Injection via id Parameter — EdTvCWE-434 8.2 High2026-03-06
CVE-2018-25170 DoceboLMS 1.2 SQL Injection via lesson.php — DoceboLMSCWE-352 8.2 High2026-03-06
CVE-2018-25168 Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin — Precurio Intranet PortalCWE-434 4.3 Medium2026-03-06
CVE-2018-25167 Net-Billetterie 2.9 SQL Injection via login.inc.php — BilletterieCWE-89 8.2 High2026-03-06
CVE-2018-25166 Meneame English Pligg 5.8 SQL Injection via search Parameter — Meneame English PliggCWE-89 8.2 High2026-03-06
CVE-2018-25164 EverSync 0.5 Arbitrary File Download via files Directory — EverSyncCWE-552 7.5 High2026-03-06

Vulnerabilities classified as access:pre-auth represent 18829 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.