Skip to content
OpenAdvisories

Vendor

cjbi

8 known vulnerabilities.

Products

admin3 4 wetech-cms 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-92919

    admin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filename

    admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the configured …

    cjbi admin3
  • High 8.8
    CVE-2026-92918

    admin3 through 3.0.0 Session Token Disclosure via Audit Log

    admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as be…

    cjbi admin3