CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

Cross site request forgery (csrf)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

CVE-2021-46026

CVE-2021-46026 affects the Mysiteforme system (permission management). The vulnerability is a Cross Site Scripting (XSS) flaw in the backend blog management’s article/blog tag function, stemming from insufficient validation of user-supplied data in the tag workflow. Impact: client-side JavaScript...

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

CVE-2021-46027

CVE-2021-46027 concerns a CSRF vulnerability in the background blog management of mysiteforme . The description across sources states an attacker can craft a malicious link and, when a site administrator clicks it, a blog tag is added, indicating a cross-site request forgery in the backend admini...

PT-2022-12512 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a CSRF vulnerability in the background blog management of mysiteforme. An attacker can construct a malicious link that, when clicked by an administrator, results in t...

Mysiteforme 跨站脚本漏洞

Mysiteforme is a permission management system. mysiteforme suffers from a cross-site scripting vulnerability that stems from the lack of user-supplied data and output data validation filtering in the blog tagging function of the backend blog management. An attacker could exploit the vulnerability...

PT-2022-12511 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a Cross Site Scripting XSS vulnerability via the add blog tag function in the background blog management. This allows for potential malicious script execution...

CVE-2021-46026: Improper Neutralization of Input During Web Page Generation

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

CVE-2021-46027: Cross-Site Request Forgery (CSRF)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

Li Lei's blog suffers from a file upload vulnerability (CNVD-2020-47302)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

SQL Injection Vulnerability in Li Lei's Blog

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2018-19901

No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...

CVE-2018-19901

No-CMS 1.1.3 is prone to Persistent XSS via the blog/managearticle/index/ "articletitle" parameter...

SQL injection vulnerability in BlogManage/Resource/UserForResourceList.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. The product BlogManage/Resource/UserForResourceList.aspx page SQL injection vulnerability, an attacker registers an...

SQL injection vulnerability in BlogManage/Video/MyVideoAlbum.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. The product BlogManage/Video/MyVideoAlbum.aspx page SQL injection vulnerability, an attacker registers an account log...

SQL injection vulnerability in BlogManage/Video/MyVideo.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. ECS BlogManage/Video/MyVideo.aspx page has a SQL injection vulnerability, which can be exploited to obtain sensitive...