EUVD-2022-47866

Malicious code in bioql PyPI...

EUVD-2022-33048

Malicious code in bioql PyPI...

CVE-2024-31609

Cross Site Scripting XSS vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration...

CVE-2024-22938

Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init function in admin.class.php component...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Add function under the Administrator List module...

CVE-2022-28606

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2024-31613: Cross-Site Request Forgery (CSRF)

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

CVE-2024-31613

BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery CSRF in name="headcode" or name="footcode."...

PT-2024-24154 · Bosscms · Bosscms

Name of the Vulnerable Software and Affected Versions: BOSSCMS version 3.10 Description: The issue is related to Cross Site Request Forgery CSRF in the head code or foot code parameters. This means an attacker could potentially trick a user into performing unintended actions on the web applicatio...

BossCMS Security Breach

Wenzhou Huoyin Information Technology BossCMS is a content management system based on MySQL architecture of self-developed PHP framework by Wenzhou Huoyin Information Technology. A security vulnerability exists in BossCMS v3.10, which is caused by a cross-site request forgery CSRF vulnerability i...

CVE-2024-31609

Cross Site Scripting XSS vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration...

CVE-2024-31609

Cross Site Scripting XSS vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration...

CVE-2024-31609

Cross Site Scripting XSS vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration...

PT-2024-24149 · Bosscms · Bosscms

Name of the Vulnerable Software and Affected Versions: BOSSCMS version 3.10 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the header code and footer code fields in code configuration. This enables attackers to execute malicious scripts on the affected...

CVE-2024-31609: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration...