Metinfo MetInfo SQL注入漏洞

Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in index.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker ca...

CVE-2020-21132: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

PT-2021-10232

Name of the Vulnerable Software and Affected Versions: ThinkSAAS version 2.7 Description: The issue allows remote attackers to modify the description of any user's photo. This is achieved via the photoid and photodesc parameters in the "index.php?app=photo" component. Recommendations: For ThinkSA...

CVE-2020-18741: Undefined Security Weakness

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...

CVE-2020-23697

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CVE-2021-34190: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

PT-2021-10928

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue is related to a Cross Site Scripting vulnerability in the page feature of admin/index.php. This vulnerability can be exploited via the page feature. Recommendations For Monstra CMS version 3.0.4,...

CVE-2020-23697: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

CVE-2020-18646

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

PT-2021-10192

Name of the Vulnerable Software and Affected Versions: NoneCMS version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved via the component "/public/index.php". Recommendations: For NoneCMS version 1.3, consider restricting access to the...

CVE-2020-18648: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMSv1.0/admin/index.php?c=administrator&a=add"...

CVE-2020-18646: Exposure of Resource to Wrong Sphere

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

Cross site scripting

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

CVE-2020-19511 affects Typesetter 5.1. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the index.php/Admin/Classes interface, specifically through the className and Description fields. Descriptions across multiple connected sources confirm the editable fields in the admin U...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

PT-2021-3388

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description field...