CVE-2021-32661

CVE-2021-32661 affects Backstage’s Techdocs Plugin, prior to version 0.9.5. A malicious internal actor could upload documentation content embedding a malicious script inside an HTML element, potentially accessing sensitive data when other users view the page. The root cause is improper handling ...

CVE-2021-32660

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of @backstage/tehdocs-common prior to 0.6.4, a malicious internal actor is able to upload documentation content with malicious scripts. These...

CVE-2021-32660

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of @backstage/tehdocs-common prior to 0.6.4, a malicious internal actor is able to upload documentation content with malicious scripts. These...

CVE-2021-32660

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of @backstage/tehdocs-common prior to 0.6.4, a malicious internal actor is able to upload documentation content with malicious scripts. These...

Design/Logic Flaw

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of @backstage/tehdocs-common prior to 0.6.4, a malicious internal actor is able to upload documentation content with malicious scripts. These...

CVE-2021-32660

Backstage TechDocs: In @backstage/techdocs-common versions before 0.6.4, an internal actor can upload content containing malicious scripts. The scripts bypass frontend sanitization when content is viewed via the TechDocs API, potentially exposing sensitive data if the API shares origin with the B...

CVE-2021-32660 TechDocs content sanitization bypass

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of @backstage/tehdocs-common prior to 0.6.4, a malicious internal actor is able to upload documentation content with malicious scripts. These...

backstage 代码问题漏洞

Backstage is an open platform for building developer portals, and techdocs common contains the common features of Backstage's techdocs. An unspecified vulnerability exists in Backstage. An attacker can exploit the vulnerability to access sensitive data...

backstage 代码问题漏洞

Backstage is the open platform for building developer portals. An unspecified vulnerability exists in Backstage. An attacker could exploit the vulnerability to access sensitive data...

Tangshan Ping Sheng Electronic Technology Development Co., Ltd. website backstage management system has a logic flaw vulnerability

Tangshan Ping Sheng Electronic Technology Development Co., Ltd. business scope includes: electronic products, instruments, electrical equipment, computers, software, automatic control system design, manufacturing, electromechanical equipment, wholesale, retail; technical services and so on...

SQL Injection Vulnerability in Backstage Login of Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

Zhuhai Innovation China website building system backstage login there are logic flaws vulnerability

Zhuhai Innovation Network Technology Co., Ltd. is committed to the application of the Internet, e-commerce platform operation, website construction and maintenance, micro letter public number and small program development. Zhuhai innovation China station building system background login there is ...

SQL Injection Vulnerability in Five Fingers CMS Backstage Model Management System

Five Fingers CMS is a professional content management system. Five Fingers CMS backend model management system has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

Aike cms backstage file containment vulnerability

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS backend file contains a vulnerability , attackers can use the vulnerability to download system files , to obtain sensitive informatio...

Mogul Interactive website builder system backstage login page has a universal password login vulnerability

Xi'an Mogul Interactive Technology Co., Ltd. is to provide a series of services for enterprises from website building analysis, web design, website optimization and so on. There is a universal password login vulnerability in the background login page of Mogul Interactive website builder system,...

backstage.com XSS vulnerability

Open Bug Bounty ID: OBB-608494 Description| Value ---|--- Affected Website:| backstage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

File Upload Vulnerability in V5.4 Backstage upload_bm1.asp Page of NetShow Shopping System

Net show shopping system is a shopping site developed with asp + access. A file upload vulnerability exists in the background uploadbm1.asp page of NetShow Shopping System V5.4. It allows an attacker to upload a webshell and gain server privileges...

phpmywind <=5.4 version of the backstage blind official website demo to verify

No description provided by source...

March 7, 2017, update for Publisher 2016 (KB3128047)

None None...

backstage.com XSS vulnerability

Vulnerable URL: https://www.backstage.com/casting/?gender=Bage=age=99=99status===50.0=by=audition=1= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17866 VIP website status:| Yes Check backstage.com SSL...