Lucene search
+L

8 matches found

OSV
OSV
•added 2021/03/10 2:15 p.m.•15 views

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

5.4CVSS6AI score0.00538EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/03/10 2:15 p.m.•13 views

CVE-2021-3224

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

5.4CVSS5.9AI score0.00538EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/10 12:00 a.m.•5 views

CVE-2021-3224: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter...

5.4CVSS5.7AI score0.00538EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/03/10 12:00 a.m.•12 views

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source content management system. A stored cross-site scripting vulnerability exists in /admin/pages/new in CSZ CMS 1.2.9. An attacker can exploit this vulnerability via the content parameter to conduct a cross-site scripting attack...

5.4CVSS5.3AI score0.00538EPSS
SaveExploits1References3
CVE
CVE
•added 2018/09/10 4:00 a.m.•55 views

CVE-2018-16772

CVE-2018-16772 affects Hoosk v1.7.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via the Navigation Title when creating a new page at admin/pages/new. The attack vector is user-facing via the web interface, with the underlying cause described as a navigation title handling...

4.8CVSS4.8AI score0.0067EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/10 12:00 a.m.•4 views

CVE-2018-16772: Improper Neutralization of Input During Web Page Generation

Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...

4.8CVSS5.6AI score0.0067EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/18 12:00 a.m.•5 views

CVE-2012-1901: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...

6.8CVSS5.9AI score0.01234EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2012/03/17 12:00 a.m.•23 views

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

1AI score
SaveExploits0
Rows per page
Query Builder