126 matches found
Babel - Open Redirect
Babel contains an open redirect vulnerability via redirect.php in the newurl parameter. An attacker can use any legitimate site using Babel to redirect user to a malicious site, thus possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations. id:...
CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension
CMSmadesimple Stored XSS v2.2.18 Autore: Sergio Descrizione: Vulnerabilità Cross Site Scripting in CMSmadesimple v.2.2.18 che consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nei Profili dell'editor Extensions - MicroTiny WYSIWYG. Vettori di...
CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation
Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...
CVE-2023-43358-CMSmadesimple-Stored-XSS---News
CMSmadesimple Stored XSS v2.2.18 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in CMSmadesimple v.2.2.18 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel campo Title del menu Content - News. Vettori di attacco:...
CVE-2023-43356-CMSmadesimple-Stored-XSS---Global-Settings
CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Beschreibung: Cross Site Scripting Schwachstelle in CMSmadesimple v.2.2.18 erlaubt einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript in die Global Meatadata im Menü "Settings- Global Settings Menu" einzuschleusen. Angriffsvektore...
CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user
CMSmadesimple XSS Riflesso v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità di cross-site scripting XSS in install/adduser.php di CMSmadesimple v.2.2.18 consentono a un attaccante locale di eseguire codice arbitrario tramite uno script manipolato nei campi password e conferma password i...
CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra
CMSmadesimple Stored XSS v2.2.18 लेखक: सर्जियो विवरण: CMSmadesimple v.2.2.18 में क्रॉस-साइट स्क्रिप्टिंग भेद्यता एक स्थानीय हमलावर को Content - News Menu के Extra में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। हमले के वेक्टर: स्क्रिप्टिंग "Content - News Menu" क...
CVE-2023-43352-CMSmadesimple-SSTI--Content
CMSmadesimple SSTI v2.2.18 المؤلف: Sergio الوصف: ثغرة حقن القوالب من جانب الخادم SSTI في CMSmadesimple الإصدار 2.2.18 تسمح لمهاجم محلي باستخدام صيغة القالب الأصلية لحقن حمولة خبيثة في قالب، والتي يتم تنفيذها بعد ذلك على الخادم. نواقل الهجوم: تسمح ثغرة SSTI في تعقيم الإدخال في محتوى "قائمة إدارة...
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in CMSmadesimple v.2.2.18 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Top Directory im File-Picker-Menü auszuführen. Angriffsvektoren: Skripting. Eine...
CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager
CMSmadesimple File Upload - XSS v2.2.18 Autore: Sergio Descrizione: La vulnerabilità di caricamento file in CMSmadesimple v.2.2.18 consente a un attaccante locale di caricare un file PDF con XSS nascosto. Vettori d'attacco: Una vulnerabilità nella sanitizzazione del caricamento file di File Manag...
CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager
CMSmadesimple XSS Memorizzato v2.2.18 Autore: Sergio Descrizione: Molteplici vulnerabilità cross-site scripting XSS in CMSmadesimple v.2.2.18 consentono a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script appositamente predisposto nei dati Page Specific Metadata e...
CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut
CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Descrição: Vulnerabilidade de Cross Site Scripting no CMSmadesimple v.2.2.18 permite que um atacante local execute código arbitrário por meio de um script elaborado no campo Title em My Preferences - Manage Shortcuts Vetores de Ataque: Scripting Uma...
CVE-2023-43339
Cross-Site Scripting XSS vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User or Database Port components...
CVE-2023-43357
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...
CVE-2023-43353
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...
CVE-2023-43358
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...
CVE-2023-43354
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component...
EUVD-2018-1864
Malware in sbrugna...