EUVD-2019-7775

Malware in sbrugna...

EUVD-2020-10953

Malware in sbrugna...

EUVD-2020-15802

Malware in sbrugna...

EUVD-2024-44198

Malicious code in bioql PyPI...

CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

CVE-2025-4545 CTCMS Content Management System File Tpl.php del path traversal

A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to...

CVE-2024-4587 DedeCMS tpl.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4587

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4587: Cross-Site Request Forgery (CSRF)

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2023-34842: Improper Control of Generation of Code

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...

CVE-2023-34842

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...

Dolibarr sensitive information disclosure

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to .tpl.php files, which allows remote attackers to obtain sensitive information...

CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the "filename", "mid", "userid", and templet' parameters...

CVE-2020-23046

DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the tpl.php component, exploitable via the filename, mid, userid, and templet parameters. The CVE records indicate an XSS flaw affecting this release without detailing the exploit vector beyond parameter abuse. The c...

PT-2021-10822

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the component tpl.php. These vulnerabilities can be exploited via the filename, mid, userid, and templet parameters. Recommendatio...

CVE-2020-23046: Improper Neutralization of Input During Web Page Generation

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

Cross site scripting

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...

CVE-2020-19046: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...

PT-2021-10275

Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/tpl.php?page=". This is a Cross Site Scripting XSS issue. Recommendations: For S-CMS version 1.0, consider restricting access...