Lucene search
K

129 matches found

Vulnrichment
Vulnrichment
added 2025/12/26 1:2 a.m.2 views

CVE-2025-15093 sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting

A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function of the file src/main/java/com/flycms/web/system/IndexAdminController.java of the component Admin Login. Performing a manipulation of the argument...

5.3CVSS3.6AI score0.00365EPSS
Exploits1References5
CVE
CVE
added 2025/12/26 1:2 a.m.10 views

CVE-2025-15093

The CVE-2025-15093 entry concerns sunkaifei FlyCMS, affecting the Admin Login path in IndexAdminController.java. The vulnerability arises from manipulating the redirectUrl argument, enabling cross-site scripting. Impact is remote, with a publicly released exploit noted. The affected scope is desc...

6.1CVSS3.6AI score0.00365EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/12/26 12:0 a.m.4 views

sunkaifei FlyCms 安全漏洞

sunkaifei FlyCms is a sunkaifei open source application. A similar Zhihu based on Q&A completely open source JAVA language development of social network building program. A security vulnerability exists in sunkaifei FlyCms, which originates from an incorrect operation of the parameter redirectUrl...

6.1CVSS4.5AI score0.00365EPSS
Exploits1References6
NVD
NVD
added 2025/12/15 9:15 p.m.6 views

CVE-2025-14722

A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scripting. The attack can be executed...

4.8CVSS0.00202EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/15 8:32 p.m.27 views

CVE-2025-14722 vion707 DMadmin Backend AddonsController.class.php add cross site scripting

A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scripting. The attack can be executed...

4.8CVSS0.00202EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/15 8:32 p.m.1 views

CVE-2025-14722 vion707 DMadmin Backend AddonsController.class.php add cross site scripting

A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scripting. The attack can be executed...

4.8CVSS5AI score0.00202EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

GreenCMS 代码注入漏洞

GreenCMS is GreenCMS open source a set of ThinkPHP-based development of content management system CMS. A code injection vulnerability exists in GreenCMS version 2.3.0603, which stems from the incorrect manipulation of the parameter Link in the file /Admin/Controller/CustomController.class.php,...

4.8CVSS4.2AI score0.00223EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/12/02 12:19 a.m.3 views

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

8.8CVSS6.9AI score0.00144EPSS
Exploits1References1
NVD
NVD
added 2025/12/01 9:15 p.m.2 views

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

8.8CVSS0.00144EPSS
Exploits1References2
OSV
OSV
added 2025/12/01 9:15 p.m.2 views

CVE-2025-65840

PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery CSRF in the CkEditorAdminController...

8.8CVSS6.8AI score
Exploits0References2
EUVD
EUVD
added 2025/11/30 6:30 a.m.3 views

EUVD-2025-199924

A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument...

6.5CVSS6.2AI score0.00271EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/11/30 6:2 a.m.8 views

CVE-2025-13783 taosir WTCMS CommentadminController CommentadminController.class.php delete sql injection

A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument...

6.5CVSS0.00271EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/30 12:0 a.m.4 views

wtcms SQL注入漏洞

wtcms is a ThinkPHP-based content management system CMS by Taosir Individual Developer. An SQL injection vulnerability exists in wtcms, which stems from incorrect manipulation of the parameter ids in the file application/Comment/Controller/CommentadminController.class.php, which could lead to SQL...

9.8CVSS7AI score0.00271EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-10906

Malware in sbrugna...

5.5CVSS5.1AI score0.01359EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11432

Malware in sbrugna...

7.5CVSS7.6AI score0.02024EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-18093

Malware in sbrugna...

7.5CVSS7.4AI score0.00851EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10518

Malware in sbrugna...

8.8CVSS8.8AI score0.00877EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-19300

Malware in sbrugna...

7.2CVSS7AI score0.01EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-1749

Malware in sbrugna...

8.8CVSS8.8AI score0.01346EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-48616

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00343EPSS
Exploits1References1
Rows per page
Query Builder