Cross site scripting

Cross Site Scripting XSS vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

CVE-2020-36763

CVE-2020-36763 involves a Cross-Site Scripting (XSS) flaw in DuxCMS 2.1. The issue allows remote attackers to execute arbitrary scripts by manipulating the content , time , and copyfrom parameters when adding or editing a post. Root cause: insufficient input validation/escaping in these fields. I...

CVE-2020-21881

Cross Site Request Forgery CSRF vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add...

DuxCMS 跨站请求伪造漏洞

DuxCMS is an open source content management system. A cross-site request forgery vulnerability exists in DuxCMS version 2.1, which originates from admin.php that allows remote attackers to modify application data via article/admin/content/add...

PT-2023-11903 · Duxcms · Duxcms

Name of the Vulnerable Software and Affected Versions: DuxCMS version 2.1 Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post. This enables attackers to execute malicious scripts on th...

CVE-2020-21881

DuxCMS 2.1 contains a Cross Site Request Forgery (CSRF) vulnerability in admin.php (endpoint article/admin/content/add) that allows remote attackers to modify application data. The issue is documented across multiple sources (e.g., CVE-2020-21881) with remediation guidance suggesting CSRF token v...

BMIT BMS 2.1 SQL Injection

==================================================================================================================================== | Title : BMIT BMS 2.1 Auth BY Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendor...

Advisory ROSA-SA-2023-2200

Software: openblas 0.3.3 OS: ROSA Virtualization 2.1 packageevrstring: openblas-0.3.3-5.rv3.1.src.rpm CVE-ID: CVE-2021-4048 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: An out-of-bounds read vulnerability was discovered in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack before version...

PT-2023-24843 · Unknown · Grandslambert Login Configurator

Name of the Vulnerable Software and Affected Versions: GrandSlambert Login Configurator plugin versions = 2.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject malicious scripts into th...

CVE-2020-23909

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

UBUNTU-CVE-2020-23909

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in David Pokorny Replace Word plugin = 2.1 versions...

CVE-2020-23909

Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...

WordPress DeMomentSomTres Grid Archive Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software DeMomentSomTres Grid Archive Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID be92652d0948 Credits Rafie Muhammad Patchsta...

WordPress DeMomentSomTres Address Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software DeMomentSomTres Address Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f5877fb71667 Credits Rafie Muhammad Patchstack...

PT-2023-17320 · WordPress · Login Configurator

Name of the Vulnerable Software and Affected Versions: Login Configurator WordPress plugin versions through 2.1 Description: The issue is related to a reflected cross-site scripting vulnerability. It occurs because the plugin does not properly escape a URL parameter before outputting it to the...

CVE-2023-3687

Bylancer QuickVCard 2.1 contains a SQL injection in the GET Parameter Handler affecting the /blog endpoint, via manipulation of the argument s. This can be triggered remotely and results in unauthorized data access/modification (high impact per CVSS). The exact vulnerable code/path is not fully d...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection.This issue affects Parking Web Report: before 2.1...