CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2021-3242: Improper Neutralization of Special Elements used in an SQL Command

DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=...

PT-2022-10073

Name of the Vulnerable Software and Affected Versions DuxCMS version 3.1.3 Description A SQL injection issue was found in DuxCMS via the component "s/tools/SendTpl/index?keyword=". This allows for potential SQL injection attacks. Recommendations For DuxCMS version 3.1.3, consider restricting acce...