Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:46 p.m.3 views

CVE-2020-18413

Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...

4.8CVSS5.9AI score0.00075EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 1:49 a.m.4 views

CVE-2017-18413

In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...

7.8CVSS7AI score0.00068EPSS
Exploits0References1
Circl
Circl
added 2024/01/27 12:46 p.m.2 views

CVE-2019-18413

creationtimestamp| type| source ---|---|--- 2024-01-27 12:46:10+00:00| seen| https://t.me/ctinow/174749...

9.8CVSS8.7AI score0.00114EPSS
Exploits1References1
NVD
NVD
added 2023/06/27 8:15 p.m.10 views

CVE-2020-18413

Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...

4.8CVSS5.2AI score0.00075EPSS
Exploits1References1
CVE
CVE
added 2023/06/27 12:0 a.m.31 views

CVE-2020-18413

CVE-2020-18413 is a stored XSS vulnerability in Chaoji CMS v2.18 affecting the endpoint /index.php?admin-master-navmenu-add . Exploitation from this flaw could allow an attacker to execute arbitrary code within the context of the affected CMS. Multiple sources corroborate the issue and describe t...

4.8CVSS5.2AI score0.00075EPSS
Exploits1References1Affected Software1
vulnersOsv
vulnersOsv
added 2021/10/12 4:35 p.m.2 views

6ix (=0.0.0-canary.0), 9ight (>=0.0.0-canary.0 <=0.0.0-canary.6) +2903 more potentially affected by CVE-2019-18413 via class-validator (>=0.10.0 <=0.13.2)

class-validator NPM version =0.10.0, =0.0.0-canary.0, =0.0.1, =1.0.4, =4.2.3, =2.7.0, =1.1.0, =1.1.0, =1.0.0, =0.0.1, =0.1.0, =0.0.2, =0.0.1, =0.0.13 and more Source cves: CVE-2019-18413 Source advisory: OSV:GHSA-FJ58-H2FR-3PP2...

9.8CVSS7.2AI score0.00114EPSS
Exploits1
NVD
NVD
added 2019/10/24 6:15 p.m.18 views

CVE-2019-18413

In TypeStack class-validator 0.10.2, validate input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this option is not...

9.8CVSS6.1AI score0.00114EPSS
Exploits1References4
CVE
CVE
added 2019/10/24 12:0 a.m.141 views

CVE-2019-18413

CVE-2019-18413 affects TypeStack class-validator 0.10.2, where validate() input validation can be bypassed because internal attributes can be overwritten with a conflicting name. This bypass enables attackers to inject malicious input potentially leading to SQL Injection or XSS. The description n...

9.8CVSS9.4AI score0.00114EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder