167 matches found
PT-2022-20000
Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description The issue is related to Cross Site Scripting XSS and can be exploited via the /admin/users/save.php endpoint. This allows for malicious script execution. No information is provided about the estimated number ...
PT-2022-19999
Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.5.2 Description The issue is related to Cross Site Scripting XSS via the "adminpagessections save.php" endpoint, specifically the namesection2 parameter. This allows for potential malicious script injection. Recommendations...
CVE-2022-30073: Improper Neutralization of Input During Web Page Generation
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting XSS via /admin/users/save.php...
CVE-2022-28035
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminajaxblur-save.php...
PT-2022-18774
Name of the Vulnerable Software and Affected Versions Atom.CMS version 2.0 Description The issue is related to SQL Injection. It affects the Atom.CMS admin ajax blur-save.php file. Recommendations For Atom.CMS version 2.0, update to a version that fixes the SQL Injection issue in the Atom.CMS adm...
CVE-2022-28035: Improper Neutralization of Special Elements used in an SQL Command
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminajaxblur-save.php...
Cross site request forgery (csrf)
A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...
Cross site scripting
A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...
PT-2021-10388
Name of the Vulnerable Software and Affected Versions: ZZZCMS version 1.7.1 Description: A Cross Site Scripting XSS issue exists via an editfile action in the "save.php" endpoint. This allows for potential malicious script execution. Recommendations: For ZZZCMS version 1.7.1, consider restricting...
PT-2021-10387
Name of the Vulnerable Software and Affected Versions: ZZZCMS version 1.7.1 Description: A Cross Site Request Forgery CSRF issue exists via the save user function in the "save.php" endpoint. This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For ZZZCMS...
CVE-2020-19683: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS exists in ZZZCMS V1.7.1 via an editfile action in save.php...
CVE-2020-19682: Cross-Site Request Forgery (CSRF)
A Cross Site Request Forgery CSRF vulnerability exits in ZZZCMS V1.7.1 via the saveuser funciton in save.php...
CVE-2021-25877
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php...
CVE-2021-25877
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php...
CVE-2021-25877
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php...
CVE-2021-25877
AVideo/YouPHPTube 10.0 and earlier is affected by an insecure file write vulnerability. An administrator-privileged user can write arbitrary files on the filesystem via the save.php file using lag and code variables. Documented impact is ability to write files on the server filesystem, enabli...
CVE-2021-25877
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php...
CVE-2021-25877: Improper Control of Generation of Code
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php...
YouPHPTube 代码注入漏洞
YouPHPTube is a PHP-based video website system. YouPHPTube has a security vulnerability that originates from an administrator privileged user being able to write files on the file system using flags and code variables in file save.php...