08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12674 more potentially affected by CVE-2026-41673 via xmldom (>=0.1.2, <=0.6.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-41673 Source advisory: SNYK:JS-XMLDOM-16134529...

-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50335 more potentially affected by CVE-2026-4800 via lodash (>=4.0.0, <=4.17.23)

lodash NPM version =4.0.0, =2.0.1, =1.0.49, =0.0.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =2.3.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-4800 Source advisory: GHSA-R5FR-RJXR-66JC...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02.aula (1.0.0) +55727 more potentially affected by CVE-2026-27904 via minimatch (>=3.0.0, <=3.1.3)

minimatch NPM version =3.0.0, =1.0.1, =1.1.0 - 02.aula 1.0.0 - 0726react 0.1.1 - 08cms 1.0.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 -...

CVE-2025-15250

A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-15250 08CMS Novel System Template mtpls.inc.php code injection

A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been...

08CMS Novel System Code Injection Vulnerability

08CMS Novel System is a novel system of China Dingdot 08CMS company. A code injection vulnerability exists in 08CMS Novel System 3.4 and earlier versions, which stems from incorrect manipulation of the file admina/mtpls.inc.php in the component Template Handler, which can lead to code injection...

CVE-2025-15250: Improper Control of Generation of Code

A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21389 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: GHSA-MH29-5H37-FV8M...

08cms (1.0.0), @artdotstyle/filepix (>=1.0.10, <=1.0.11) +327 more potentially affected by CVE-2024-21523 via images (>=3.0.0, <=3.2.4)

images NPM version =3.0.0, =1.0.10, =1.1.2, =0.0.1, =0.1.0, =1.0.1, =1.4.0, =1.1.2, =1.1.8, =0.4.0, =0.6.2 and more Source cves: CVE-2024-21523 Source advisory: OSV:GHSA-VJPV-X8P9-7P85...

08cms (1.0.0), 10secondsofcode-custom (1.0.0) +3898 more potentially affected by CVE-2024-21501 via sanitize-html (>=0.1.4, <=2.12.0)

sanitize-html NPM version =0.1.4, =1.0.0, =4.11.0, =1.0.0, =1.0.0, =0.0.1, =0.6.0, =0.1.0, =0.1.0, =11.1.0, =1.3.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2024-21501 Source advisory: MEND:CVE-2024-21501...

01-numacert (>=1.0.0, <=3.0.0), 06-tekbooks (0.1.0) +46658 more potentially affected by CVE-2021-44906 via minimist (>=0.0.2, <=0.2.1)

minimist NPM version =0.0.2, =1.0.0, =0.3.0, =0.0.15, =1.0.4, =1.0.0, =1.0.0, =1.0.1 - 20190403-utils 1.0.0 - 20231122-npm 1.0.0 and more Source cves: CVE-2021-44906 Source advisory: GHSA-XVCH-5GV4-984H...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10855 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.0.3, =0.0.9 and more Source cves: CVE-2021-21366 Source advisory: OSV:GHSA-H6Q6-9HQW-RWFV...

08cms (1.0.0), 0xweb (>=0.9.9, <=0.10.93) +29782 more potentially affected by CVE-2021-23358 via underscore (>=1.3.2, <=1.12.0)

underscore NPM version =1.3.2, =0.9.9, =0.1.1, =0.1.0, =1.0.0, =0.0.1-alpha, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.2.2, =0.1.0, =1.5.3 and more Source cves: CVE-2021-23358 Source advisory: SNYK:JS-UNDERSCORE-1080984...

Stored Cross-Site Scripting Vulnerability in 08CMS Auto Portal System Rental Function

08CMS Automotive Portal System is a high-end solution for automotive portals, based on PHP+MYSQL development, super static page deployment, template and program separation, scalable architecture, open code, unlimited support for deep secondary development. A stored cross-site scripting...

08cms (1.0.0), 3dshex (>=0.1.0, <=0.5.3) +9429 more potentially affected by CVE-2018-3750 via deep-extend (>=0.2.2, <=0.5.0)

deep-extend NPM version =0.2.2, =0.1.0, =1.0.0, =1.1.0, =4.0.0, =1.0.0, =0.3.12-20180525105709, =1.0.0, =0.0.1, =0.0.1, =0.2.2, =0.2.3 and more Source cves: CVE-2018-3750 Source advisory: OSV:GHSA-HR2V-3952-633Q...

04_nodeblog (1.0.0), 08cms (1.0.0) +17219 more potentially affected by CVE-2015-8858 via uglify-js (>=0.0.1, <=2.5.0)

uglify-js NPM version =0.0.1, =0.3.0, =0.0.1, =1.0.2, =1.0.1, =1.0.0, =0.0.1-alpha, =1.0.0 - 3vot-clay 2.0.1 and more Source cves: CVE-2015-8858 Source advisory: MEND:CVE-2015-8858...

08CMS info.php 参数tblprefix SQL注入漏洞

0x01影响范围 08cms广泛应用于汽车、房产系统。厂商： http://www.08cms.com/ 08cms 谷歌关键字用户量很大： 0x02漏洞描述 08cms在文件info.php处对参数tblprefix过滤不严格，导致出现SQL注入漏洞。远程攻击者可以构造SQL语句，执行恶意操作。 0x03漏洞详情 SQL注入点： /info.php?fid=1&tblprefix=cmsmsession tblprefix存在注入 0x04漏洞证明 可以构造如下poc进行利用： http://.com/info.php?fid=1&tblprefix=cmsmsession where...

08cms 4 /include/paygate/alipay/pays.php SQL注入漏洞

No description provided by source...

08CMS novel search-injected - scripts vulnerability-vulnerability warning-the black bar safety net

By: thexiaoCon A large cow, don't shoot the bricks, for the first time. | The following is quoted fragment: //Search for the word pre-processing $searchword = empty$searchword ? ": cutstrtrim$searchword,5 0,"; $da'searchword' = $searchword; if$searchword $filterstr .= $filterstr ? '&' :...