Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-30760

Arbitrary User Data Manipulation via XAJAX in SourceBans Material Admin

An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Sb-materialadmin
Products
Sourcebans Material Admin
CVE-2026-30761

An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via uploading a crafted image file.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Sb-materialadmin
Products
Sourcebans Material Admin