EUVD-2019-4845

Malware in sbrugna...

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

Incorrect Authorization

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Incorrect Authorization due to a missing check in the access function in FieldUpdateActionBase.php. An attacker with limited...

White-Jotter 代码注入漏洞

White-Jotter is an Antabot personal developer's front-end and back-end separation project using Vue+Spring Boot development, comes with a full set of development tutorials. Antabot White-Jotter 0.2.2 and earlier versions have a code injection vulnerability that originates from the component artic...

PT-2024-17886 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue was found in the Edit Book Handler component, affecting an unknown function of the file /admin/content/book. This leads to server-side request forgery, which can be...

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

CVE-2024-5310

CVE-2024-5310 affects JFinalCMS up to version 20221020, with the vulnerability located in the unknown portion of the file /admin/content . The issue arises from manipulation of the Title argument, leading to Cross-Site Scripting (XSS) . Exploitation is possible remotely, and the exploit has been ...

PT-2024-40240 · Unknown · Ez Publish Legacy

Name of the Vulnerable Software and Affected Versions: ezpublish-legacy affected versions not specified Description: The issue is related to an information disclosure vulnerability in the legacy admin content tree menu. If a view has been disabled in site.ini SiteAccessRules Rules and an attacker...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

Sql injection

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 5.0.0, which was discovered to contain an SQL injection vulnerability via /admin/content/data...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

CVE-2023-5287

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/admincontenttag.php?action=savecontent. The manipulation of the argument tag leads to cross site scripting. It is possible to initiate the attac...

CVE-2023-5264

A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2023-31985 · Huakecms · Huakecms

Name of the Vulnerable Software and Affected Versions: huakecms version 3.0 Description: A critical vulnerability was found in huakecms, affecting an unknown functionality of the file /admin/cms content.php. The manipulation of the cid argument leads to SQL injection. The attack can be launched...

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

PT-2023-16899 · Unknown · Guizhou 115Cms

Name of the Vulnerable Software and Affected Versions: Guizhou 115cms version 4.2 Description: A problematic issue has been found in Guizhou 115cms, affecting an unknown function of the file /admin/content/index. This issue leads to unrestricted upload and can be launched remotely. The exploit ha...

Guizhou 115cms 代码问题漏洞

115cms is a multi-module intelligent website builder from Guizhou Forxin Technology 115cms Company in China. Guizhou 115cms version 4.2 has a code issue vulnerability, the vulnerability stems from the file /admin/content/index.html in the problem, will lead to unrestricted upload...