Lucene search
+L

147 matches found

BDU FSTEC
BDU FSTEC
•added 2025/03/17 12:00 a.m.•14 views

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system allows attackers to execute XSS attacks.

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.4AI score0.00392EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2025/01/05 4:31 a.m.•52 views

CVE-2024-13132 Emlog Pro Subpage article.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

5.3CVSS0.00392EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/06 12:00 a.m.•37 views

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

0.00492EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/06 12:00 a.m.•20 views

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

8.3AI score0.00492EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/04 5:15 a.m.•25 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.5CVSS7.1AI score0.00586EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/04 12:00 a.m.•102 views

CVE-2024-31025

A SQL Injection vulnerability exists in ECshop version 4.x within the file/article.php component. The root cause is a lack of external input SQL statement validation, which allows an attacker to manipulate database queries. This vulnerability can be exploited to view, add, modify, or delete infor...

7.4AI score0.00586EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/04 12:00 a.m.•26 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.4AI score0.00586EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/04 12:00 a.m.•15 views

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

7.7AI score0.00586EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/06 10:58 a.m.•30 views

BIT-MEDIAWIKI-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestam...

5.3CVSS5.3AI score0.00421EPSS
SaveExploits0References3
NVD
NVD
•added 2024/03/01 5:15 p.m.•34 views

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

8.8CVSS7.2AI score0.00316EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•47 views

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via /update-article.php...

7.3AI score0.00316EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/01 12:00 a.m.•102 views

CVE-2024-27689

Stupid Simple CMS version v1.2.4 is vulnerable to a Cross-Site Request Forgery (CSRF) . This security flaw specifically affects the /update-article.php component, potentially allowing an attacker to perform unauthorized actions. While the vulnerability is confirmed in multiple records, the provid...

7.4AI score0.00316EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/01/16 12:00 a.m.•40 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/14 12:15 a.m.•27 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS0.00475EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/13 12:00 a.m.•23 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.2AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/13 12:00 a.m.•38 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.2AI score0.00475EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•14 views

MediaWiki Security Breach

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki, which stems from includes/page/Article.php checking...

5.3CVSS6.8AI score0.00421EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/09 12:00 a.m.•20 views

CVE-2023-45364

An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked. This reveals that a given revision ID belonged to the given page title, and its timestam...

7AI score0.00421EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/10/06 12:00 a.m.•9 views

PT-2023-6328 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.36.x through 1.39.x before 1.39.5 MediaWiki versions 1.40.x before 1.40.1 Description: An issue was discovered in includes/page/Article.php. Deleted revision existence is leaked due to incorrect permissions being checked,...

9.8CVSS6AI score0.22699EPSS
SaveExploits27References119
attackerkb
attackerkb
•added 2023/08/17 8:15 p.m.•7 views

CVE-2023-31946

File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php...

7.2CVSS6.2AI score0.01468EPSS
SaveExploits1References2
Rows per page
Query Builder