CVE-2021-46028

In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...

CVE-2021-46028

In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...

CVE-2021-46028

In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...

CVE-2021-46028

In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...

CVE-2021-46204

Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php...

PT-2022-12513

Name of the Vulnerable Software and Affected Versions mblog versions prior to 3.5.0 Description The issue concerns a CSRF vulnerability in the background article management. An attacker can construct a malicious link that, when clicked by an administrator, results in the deletion of an article...

CVE-2021-46028: Cross-Site Request Forgery (CSRF)

In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...

langhsu mblog 跨站请求伪造漏洞

langhsu mblog is langhsu open source an application system . Open source Java blog system , support for multi-user , support for switching themes . langhsu mblog 3.5.0 and its previous versions exist cross-site request forgery vulnerability , the vulnerability stems from the lack of background...

Taocms SQL注入漏洞

Taocms is a micro Cms Content Management System in China. Taocms in v3.0.2 version exists SQL injection vulnerability, the vulnerability stems from taocmsincludeModelArticle.php for SQL statements lack of effective filtering and escaping. An attacker can exploit this vulnerability to execute...

Halo cross-site scripting vulnerability (CNVD-2022-08379)

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that originates in Halo, versions v1.0.0 through v1.4.17 latest are susceptible to cross-site scripting XSS stored in the title of a post, which can be exploited by an attacker to...

CVE-2022-22123

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22125 Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22125

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22123 Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22123

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server...

PT-2022-15259

Name of the Vulnerable Software and Affected Versions Halo versions v1.0.0 through v1.4.17 Description The issue concerns Stored Cross-Site Scripting XSS in the article title, allowing an authenticated attacker to inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22125: Improper Neutralization of Input During Web Page Generation

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22123: Improper Neutralization of Input During Web Page Generation

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server...

PT-2022-15261

Name of the Vulnerable Software and Affected Versions Halo versions v1.0.0 through v1.4.17 Description The issue concerns Stored Cross-Site Scripting XSS in the article tag, allowing an authenticated admin attacker to inject arbitrary javascript code that will execute on a victim’s server...

CVE-2022-22125

In Halo, versions v1.0.0 to v1.4.17 latest are vulnerable to Stored Cross-Site Scripting XSS in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server...