CVE-2025-5886

A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument activepost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed ...

CVE-2025-5886: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument activepost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed ...

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system allows attackers to execute XSS attacks.

The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

CVE-2025-25823: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...

CVE-2024-57599: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php...

CVE-2024-13132: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13140: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2023-41619: Improper Neutralization of Input During Web Page Generation

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

CVE-2023-30205: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the uniqueid parameter in /admin/article.php...

CVE-2022-37111

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

Sql injection

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

CVE-2022-37111: Improper Neutralization of Special Elements used in an SQL Command

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

CVE-2018-20561

CVE-2018-20561 affects DouCo DouPHP 1.5 20181221. The vulnerability is a stored/reflected XSS in admin/article.php?rec=update via the title parameter, enabling injection of arbitrary script/HTML as described in multiple sources. Affected component is the admin interface (article update logic) and...

CVE-2018-20561: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter...

PT-2018-15431

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/article.php?rec=update" API endpoint has a cross-site scripting XSS issue via the title parameter. Recommendations For DouPHP version 1.5 20181221, avo...

Arbitrary File Deletion Vulnerability in ECShop

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop V3.0.0 UTF8 release0530 version of the...