25 matches found
CVE-2018-10032
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
CVE-2018-10032
CMS Made Simple (CMSMS) 2.2.7 contains a Reflected XSS in admin/moduleinterface.php via the m1_version parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) as a reflection vulnerability in CMSMS 2.2.7; details consistently indicate the vulnerable component is...
CVE-2017-10032
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Access Control List. Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exploitable vulnerability allows low privileged...
CVE-2017-10032
CVE-2017-10032 affects Oracle Transportation Management (OTM) within Oracle Supply Chain Products Suite, specifically the Access Control List subcomponent. Affected versions include 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1, and 6.4.2. The vulnerability can be exploited by a low-privileged...
CVE-2014-10032
CVE-2014-10032 affects the Taboada MacroNews 1.0 software, specifically the web component news_popup.php. The vulnerability is an SQL injection via the id parameter that can be exploited by remote authenticated users to execute arbitrary SQL commands. The affected product appears in public record...