Lucene search
+L

79 matches found

NVD
NVD
•added 2023/08/05 7:15 p.m.•30 views

CVE-2023-4170

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4.8CVSS4AI score0.00613EPSS
SaveExploits1References3
Prion
Prion
•added 2023/08/05 7:15 p.m.•31 views

Cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4CVSS4.7AI score0.00613EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/08/05 6:31 p.m.•26 views

CVE-2023-4170 DedeBIZ Article cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

3.5CVSS3.7AI score
SaveExploits0References5
CVE
CVE
•added 2023/08/05 6:31 p.m.•164 views

CVE-2023-4170

DedeBIZ 6.2.10 is affected, with the Article Handler component enabling cross-site scripting. The issue is exploitable remotely and is publicly disclosed (CVE-2023-4170, VDB-236186). Red Hat/EUVD/CNVD/CVE records corroborate XSS in this version. Root cause detail is not disclosed in the documents...

4.8CVSS4.2AI score0.00613EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/05 12:00 a.m.•17 views

PT-2023-28055 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A vulnerability was found in the Article Handler component, which can be exploited to lead to cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure...

4.8CVSS6AI score0.00613EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/08/05 12:00 a.m.•16 views

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which stems from the Article Handler component can lead to cross-site scripting vulnerability. No detailed vulnerability details a...

4.8CVSS6.1AI score0.00613EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/05 12:00 a.m.•4 views

CVE-2023-4170: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

4.8CVSS3.5AI score0.00613EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/12/22 12:30 a.m.•38 views

Mingsoft MCMS Cross-site Scripting vulnerability

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the...

5.4CVSS5.4AI score0.0042EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/12/22 12:30 a.m.•30 views

GHSA-6RVV-H8G7-728W Mingsoft MCMS Cross-site Scripting vulnerability

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the...

5.4CVSS4.3AI score0.0042EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/21 12:00 a.m.•14 views

CVE-2022-4640 Mingsoft MCMS Article save cross site scripting

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the...

3.5CVSS5.2AI score0.0042EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•21 views

PT-2022-27851 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.9 Description: A vulnerability has been found in the function save of the component Article Handler, leading to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected...

5.4CVSS5.1AI score0.0042EPSS
SaveExploits1References7
CVE
CVE
•added 2022/12/21 12:00 a.m.•105 views

CVE-2022-4640

Mingsoft MCMS 5.2.9 is affected; the vulnerability resides in the save function of the Article Handler, enabling cross-site scripting. Reports indicate remote exploitation with a public exploit; upgrade to a newer component version is recommended. If needed, a temporary workaround from PT-Securit...

5.4CVSS4.4AI score0.0042EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/12/21 12:00 a.m.•18 views

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS version 5.2.9, which stems from the save function of its Article Handler component that allows an attacker to implement cross-site scripting...

5.4CVSS5.1AI score0.0042EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•3 views

CVE-2022-4640: Improper Neutralization

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the...

5.4CVSS3.7AI score0.0042EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/21 12:00 a.m.•32 views

CVE-2022-4640 Mingsoft MCMS Article save cross site scripting

A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the...

3.5CVSS3.9AI score
SaveExploits0References4
OSV
OSV
•added 2022/12/08 10:15 a.m.•13 views

CVE-2020-36609

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to...

5.4CVSS3.8AI score0.00398EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/08 12:00 a.m.•13 views

DuxCMS 安全漏洞

DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which originates from cross-site scripting due to manipulation of the content parameter in an unknown section of its Article Handler component admin.php&r=article/AdminContent/edit file. The...

5.4CVSS5.2AI score0.00398EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/08 12:00 a.m.•10 views

CVE-2020-36609 annyshow DuxCMS Article edit cross site scripting

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to...

2.4CVSS3.8AI score0.00398EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•1 views

CVE-2020-36609: Improper Neutralization

A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to...

5.4CVSS4AI score0.00398EPSS
SaveExploits1References2
Rows per page
Query Builder