CVE-2020-20699

S-CMS PHP v3.0 has a cross-site scripting (XSS) vulnerability exploitable via the Copyright field in Basic Settings, allowing arbitrary web scripts/HTML execution. The vulnerability is consistently described across NVD/Red Hat/CNNVD/CNVD feeds as CVE-2020-20699, with no connected document providi...

CVE-2020-20699

A cross site scripting XSS vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings...

CVE-2020-20698

CVE-2020-20698 describes a remote code execution vulnerability in S-CMS PHP v3.0, exploitable via modification of /1.com.php to obtain shell access. Affected component is the PHP web application’s /1.com.php entry point; underlying cause is not explicitly detailed in the provided documents. Impac...

CVE-2020-20698

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

PT-2021-10537

Name of the Vulnerable Software and Affected Versions: S-CMS PHP version 3.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings. Recommendations: For S-CMS PHP versi...

PT-2021-10536

Name of the Vulnerable Software and Affected Versions: S-CMS PHP version 3.0 Description: A remote code execution issue in the /1.com.php file of S-CMS PHP allows attackers to execute arbitrary code via modification of a PHP file, potentially leading to unauthorized access. The issue can be...

PT-2021-10539

Name of the Vulnerable Software and Affected Versions: S-CMS PHP version 3.0 Description: A stored cross site scripting XSS issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload in the /app/config/ endpoint. Recommendations: For S-CMS PHP version 3.0,...

PT-2021-20918

Name of the Vulnerable Software and Affected Versions: Online Pet Shop We App version 1.0 Description: The issue concerns a Union SQL Injection vulnerability in the products.php file, also known as p=products, which can be exploited via the c or s parameter. Recommendations: For Online Pet Shop W...

PT-2021-10538

Name of the Vulnerable Software and Affected Versions: S-CMS PHP version 3.0 Description: A stored cross site scripting XSS issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box in the /app/form add/ endpoint...

CVE-2021-35458: Improper Neutralization of Special Elements used in an SQL Command

Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php aka p=products via the c or s parameter...

CVE-2020-20701: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-20700: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /app/formadd/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box...

CVE-2020-20699: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings...

CVE-2020-20698: Missing Authorization

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

CVE-2021-21440

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

CVE-2021-21440

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

Design/Logic Flaw

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

CVE-2021-21440

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

CVE-2021-21440 Support Bundle includes S/Mime and PGP keys

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

CVE-2021-21440

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...