Lucene search
+L

4 matches found

CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•16 views

Online News site 安全漏洞

Online News site is an online news site by the individual developer Mobina Jafarian. A security vulnerability exists in Online News site version v1.0, which stems from vulnerability to cross-site scripting XSS attacks and allows an attacker to execute arbitrary code via the title and summary fiel...

6.6CVSS6.5AI score0.0024EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/10/07 12:00 a.m.•4 views

PT-2024-31851

Name of the Vulnerable Software and Affected Versions OnlineNewsSite version 1.0 Description The issue allows attackers to execute arbitrary code via the Title and summary fields in the "/admin/post/edit/" endpoint. This enables attackers to run any code they want. Recommendations For...

6.6CVSS6.4AI score0.0024EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•4 views

CVE-2024-45933: Improper Control of Generation of Code

OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting XSS which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint...

6.6CVSS6.5AI score0.0024EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/08/31 12:00 a.m.•18 views

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-17188)

MiniCMS is a micro content management system designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS 1.10. An attacker can exploit this vulnerability by using the mc-admin/post-edit.php tags parameter to conduct cross-site scripting attacks...

6.1CVSS5.3AI score0.00865EPSS
SaveExploits1References1
Rows per page
Query Builder