40 matches found
CVE-2020-36492
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component selectmedia.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
CVE-2020-36491: Improper Neutralization of Input During Web Page Generation
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tagsmain.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
PT-2021-7902
Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to the lack of protection measures for the web page structure in the file pic view.php component of the DedeCMS content management system. This can be exploited by a remote attacker to...
CVE-2020-36493: Improper Neutralization of Input During Web Page Generation
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mediamain.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
CVE-2020-18035
Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...
CVE-2020-18035
Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...
CVE-2020-18035
Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...
CVE-2020-18035
CVE-2020-18035 is a cross-site scripting vulnerability in Jeesns v1.4.2. The issue arises in the CKEditor integration, specifically through the CKEditorFuncNum parameter in the file/component CkeditorUploadController.java, allowing remote attackers to craft inputs that execute arbitrary code in t...
CVE-2020-18035
Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...
CVE-2020-18035: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java"...
JEESNS 跨站脚本漏洞
JEESNS is a social management system based on the JAVA enterprise-level platform. JEESNS is vulnerable to cross-site scripting, which allows remote attackers to execute arbitrary code by injecting commands into the " CKEditorFuncNum" parameter to execute arbitrary code...
PT-2021-10120
Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: The issue allows remote attackers to execute arbitrary code by injecting commands into the CKEditorFuncNum parameter in the CkeditorUploadController.java component. This is a Cross Site Scripting XSS issue...
CVE-2019-14315
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...
CVE-2019-14315
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...
CVE-2019-14315
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...
CVE-2019-14315
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...
PT-2019-13603
Name of the Vulnerable Software and Affected Versions SunHater KCFinder versions 3.20-test1, 3.20-test2, 3.12, and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter in the upload.php file...
CVE-2019-14315: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter...