9398 matches found
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
Design/Logic Flaw
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
CVE-2019-17535 affects Gila CMS up to version 1.11.4, enabling XSS in blog-list.php via the search parameter in both the gila-blog and gila-mag themes. The vulnerability stems from the same underlying issue as CVE-2019-9647, leading to potential execution of client-side code. The connected source...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
CVE-2019-17535
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
PT-2019-15193
Name of the Vulnerable Software and Affected Versions Gila CMS versions prior to 1.11.5 Description The issue allows for XSS in blog-list.php, affecting both the gila-blog and gila-mag themes, via the search parameter. Recommendations For versions prior to 1.11.5, update to version 1.11.5 or late...
CVE-2019-17535: Improper Neutralization of Input During Web Page Generation
Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647...
MileagePlus open source blog system v2.2 has SQL injection vulnerabilities
Mile High Open Source Blog System is a blog system based on ThinkPHP development. MileagePlus Open Source Blog System v2.2 suffers from a SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...
MileagePlus open source blog system V2.0 suffers from SQL injection vulnerabilities
MileagePlus Blog System is a blog system based on ThinkPHP development. MileageMi Open Source Blog System V2.0 suffers from a SQL injection vulnerability, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...
File Upload Vulnerability in b2evolution Blog System
b2evolution is a PHP MySQL development , mature , excellent Blog engine . It contains a Blog tool should have all the features . b2evolution blog system file upload vulnerability , an attacker can exploit the vulnerability to upload arbitrary files , to obtain server privileges...
U.S. Dept Of Defense: Remote Code Execution in ██████
The vulnerability you reported has been resolved and this report is now closed. If you have any further questions or disagree that the report is resolved, please let us know. Thank you for your time and effort to improve the security of the DoD information network. Thanks @s3cr3tsdn for reporting...
Exploit for CVE-2019-15846
Exim CVE-2019-15846 =================== PoC materials to exploi...
CVE-2019-15750
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2019-15750
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2019-15750
The CVE-2019-15750 entry is supported by multiple connected records that confirm a Cross-Site Scripting (XSS) vulnerability in SITOS six Build v6.2.1. The weakness is in the blog feature, where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. Impact is describ...
CVE-2019-15750: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
PT-2019-14370
Name of the Vulnerable Software and Affected Versions SITOS six Build version 6.2.1 Description A Cross-Site Scripting XSS issue in the blog function allows remote attackers to inject arbitrary web script or HTML via the id parameter. This enables attackers to execute malicious scripts on the...
