Lucene search
+L

4227 matches found

Positive Technologies
Positive Technologies
•added 2018/04/22 12:00 a.m.•4 views

PT-2018-9807

Name of the Vulnerable Software and Affected Versions: Discuz! versions prior to X3.4 Description: The issue is related to stored XSS via the "portal.php?mod=portalcp&ac=article" API endpoint, specifically due to mishandling of IMG elements associated with remote images. Recommendations: For...

5.4CVSS5.8AI score0.00513EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/22 12:00 a.m.•5 views

CVE-2018-10297: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

5.4CVSS6AI score0.00513EPSS
SaveExploits1References2
NVD
NVD
•added 2018/04/20 5:29 p.m.•31 views

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

6.5CVSS6.5AI score0.00539EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/04/20 5:00 p.m.•38 views

CVE-2018-10248

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

6.5AI score0.00539EPSS
SaveExploits1References1
CVE
CVE
•added 2018/04/20 5:00 p.m.•65 views

CVE-2018-10248

WUZHI CMS 4.1.0 is affected by a CSRF vulnerability that allows deleting any article via the endpoint index.php?m=content&f=content&v=recycle_delete. The issue is described across multiple sources (NVD entry, Red Hat advisory, CNVD/CVELIST, and others) as a CSRF that can delete articles, with the...

6.5CVSS6.4AI score0.00539EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/20 12:00 a.m.•9 views

CVE-2018-10248: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

6.5CVSS6.6AI score0.00539EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/04/20 12:00 a.m.•17 views

PT-2018-9781 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A CSRF issue allows deletion of any article via the "index.php?m=content&f=content&v=recycle delete" endpoint. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix fo...

6.5CVSS6.3AI score0.00539EPSS
SaveExploits1References4
OSV
OSV
•added 2018/04/19 8:29 a.m.•13 views

CVE-2018-10222

An issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a Column via /admincp.php?app=articlecategory&do=save&frame=iPHP...

8.8CVSS5.8AI score0.00593EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/04/19 12:00 a.m.•6 views

PT-2018-9764

Name of the Vulnerable Software and Affected Versions: idreamsoft iCMS version 7.0 Description: A CSRF issue was found that can be exploited to add a Column via the "/admincp.php?app=article category&do=save&frame=iPHP" API endpoint. Recommendations: For idreamsoft iCMS version 7.0, as a temporar...

8.8CVSS0.00593EPSS
SaveExploits1References3
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:01 p.m.•50 views

2018-04 Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4093109)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•14 views

2018-04 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.6AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•19 views

2018-04 Security Update for Adobe Flash Player for Windows 8.1 for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.4AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•20 views

2018-04 Security Update for Adobe Flash Player for Windows Embedded 8 Standard for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.4AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•11 views

2018-04 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x86-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•13 views

2018-04 Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB4093110)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2018/04/10 5:00 p.m.•17 views

2018-04 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4093119)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
OSV
OSV
•added 2018/04/10 6:29 a.m.•17 views

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

8.8CVSS5.8AI score0.00599EPSS
SaveExploits1References1
Prion
Prion
•added 2018/04/10 6:29 a.m.•23 views

Cross site request forgery (csrf)

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

6.8CVSS8.7AI score0.00599EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2018/04/10 6:00 a.m.•2 views

CVE-2018-9923

An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request...

8.8CVSS0.00599EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/04/10 12:00 a.m.•3 views

PT-2018-19091

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS versions prior to 7.0.8 Description An issue exists where CSRF is present in the admincp.php file. This can be demonstrated by adding an article via the "app=article&do=save&frame=iPHP" request to the "/admincp.php" endpoint,...

8.8CVSS0.00599EPSS
SaveExploits1References3
Rows per page
Query Builder