CVE-2024-25187

Server Side Request Forgery SSRF vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html...

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

CVE-2024-25187

Server Side Request Forgery SSRF vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html...

PT-2024-20803 · 71Cms · 71Cms

Name of the Vulnerable Software and Affected Versions: 71cms version 1.0.0 Description: The issue allows remote unauthenticated attackers to obtain sensitive information. This is achieved via the getweather.html endpoint, which is vulnerable to Server Side Request Forgery SSRF. SSRF is a type of...

CVE-2024-25187

Server Side Request Forgery SSRF vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html...

CVE-2024-25187: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html...

CVE-2024-25187

Server Side Request Forgery SSRF vulnerability in 71cms v1.0.0, allows remote unauthenticated attackers to obtain sensitive information via getweather.html...

71cms 安全漏洞

71CMS is a smart party building system open source by xiaocheng-keji. A security vulnerability exists in 71cms v1.0.0, which stems from the presence of a Server Request Forgery SSRF vulnerability...

CVE-2024-25187

A Server Side Request Forgery (SSRF) vulnerability exists in 71cms v1.0.0 , a smart party building system. The flaw is located in the getweather.html endpoint, which allows remote unauthenticated attackers to trick the server into making requests to internal or external resources. This can result...

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

Cross site scripting

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

CVE-2024-25166: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

CVE-2024-25166

A Cross Site Scripting (XSS) vulnerability exists in 71CMS v.1.0.0 , an open-source smart party building system. The flaw allows a remote attacker to achieve arbitrary code execution by exploiting the uploadfile action parameter within the controller.php file. To mitigate this risk, it is recomme...

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

PT-2024-20794 · 71Cms · 71Cms

Name of the Vulnerable Software and Affected Versions: 71CMS version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file. This is a Cross Site Scripting vulnerability. Recommendations: For 71CMS version...