EUVD-2022-44142

Malicious code in bioql PyPI...

CVE-2022-37254

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting XSS via Background - System - system function - configuration management...

CVE-2020-19803

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings...

CVE-2020-19803

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings...

Millken DoyoCms 跨站请求伪造漏洞

Millken DoyoCms is a Php free open source enterprise Cms website builder . A security vulnerability exists in Millken DoyoCms v.2.3, which stems from a cross-site request forgery vulnerability that allows a remote attacker to execute arbitrary code through the background system settings...

CVE-2020-19803

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings...

PT-2023-11536 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the background system settings. Recommendations: For Milken DoyoCMS version 2.3, update to a version that includ...

CVE-2020-19803: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings...

CVE-2022-37254

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting XSS via Background - System - system function - configuration management...

CVE-2021-46087

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...

Design/Logic Flaw

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...

CVE-2021-46087

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...

CVE-2021-46087

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...

PT-2022-12562

Name of the Vulnerable Software and Affected Versions jfinal cms versions 5.1.0 and later Description The issue is related to a storage XSS vulnerability in the background system of the CMS. This occurs because the developers do not filter the parameters submitted by the user input form, allowing...

CVE-2021-46087: Improper Neutralization of Input During Web Page Generation

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...