Catfish CMS Cross-Site Scripting Vulnerability

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in comments in Catfish CMS version 4.7.21. A remote attacker can exploit this vulnerability by sending the 'pinglun' parameter to cat/index/index/pinglun to inject arbitrary web...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

Cross site scripting

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS version 4.7.21 is reported to be vulnerable to a cross-site scripting (XSS) issue in the pinglun parameter of the path cat/index/index/pinglun (an authenticated comment). All connected sources (Red Hat, CNVD, CNVD CNVD-2018-08759, NVD, CVE records) corroborate that this XSS affects Ca...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

Catfishcms_v4.7.18后台存储型XSS漏洞

一、漏洞简要概述： Catfish鲶鱼 CMS是一款开源的PHP内容管理系统，适合于CMS、Blog、企业站等不同类型的网站建设。 自动识别CMS、Blog 等网站类型，只要简单的切换主题就可以完成网站类型的切换。 多语言支持，包括简体中文、繁体中文、俄语、德语、法语、韩语、日语、英语各种语言。 全站自适应设计，适用于pc，手机等不同大小屏幕的终端显示，支持手机、微信等小屏幕访问。 在4.7.18版本中，该CMS后台默认自带一个插件，此插件因代码开发不严格，导致存在XSS漏洞。若用户启用该插件，将会造成危害。 二、漏洞演示...

Catfish CMS suffers from cross-site scripting vulnerability

Catfish Catfish CMS is an open source PHP content management system. A cross-site scripting vulnerability exists in Catfish CMS. An attacker can exploit this vulnerability to obtain cookie information about other users and administrators...

Logic Design Vulnerability in Catfish CMS/Blog System Logins

Catfish catfish CMS is open source PHP content management system. A logical design vulnerability exists in the Catfish CMS/Blog system login. Allow attackers to exploit the vulnerability to bypass the CAPTCHA authentication and carry out unlimited blasting attacks on the system...

Catfish CMS controller/Common.php page has a stored cross-site scripting vulnerability

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS controller/Common.php page. An attacker can insert malicious js code to obtain user cookies and other information, resulting in user hijacking...

Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend

Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

Catfish CMS suffers from a cross-site scripting vulnerability.

Catfish catfish CMS is an open source PHP content management system. Catfish Catfish CMS V4.4.10 version of the comments page there is a cross-site scripting vulnerability, an attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

Catfish CMS is vulnerable to XSS

Catfish Catfish CMS is an open source PHP CMS web content management system. catfish cms there is an XSS vulnerability, the reason for this vulnerability is not filtered user-submitted data due to the attacker can exploit the vulnerability to implant cross-site code to obtain sensitive informatio...

Catfish CMS V4.3.4 '/application/multimedia/controller/Index.php' page has an arbitrary file read vulnerability

Catfish CMS is open source PHP content management system. An arbitrary file read vulnerability exists in the Catfish CMS V4.3.4 '/application/multimedia/controller/Index.php' page. The program fails to adequately filter user input, allowing an attacker to construct a file path and read arbitrary...

Catfish CMS Has Arbitrary File Deletion Vulnerability

Catfish catfish CMS is open source PHP content management system. An arbitrary file deletion vulnerability exists in the Catfish CMS/application/user/controller/Index.php page. Allows an attacker to exploit the vulnerability to delete arbitrary files, resulting in a reinstallation...

Cross-site scripting vulnerability in Catfish CMS 'imageUp.php' page

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS 'imageUp.php' page. The program fails to adequately filter user input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute...

Cross-site scripting vulnerability in Catfish CMS 'getContent.php' page

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS 'getContent.php' page. The program fails to filter user input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute arbitra...

Gentoo Security Advisory GLSA 201408-04

Gentoo Linux Local Security Checks GLSA 201408-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the catfish package up to version 1.0.2 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

[ MDVSA-2014:162 ] catfish

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:162 http://www.mandriva.com/en/support/security/ Package : catfish Date : September 2, 2014 Affected: Business Server 1.0 Problem Description: Updated catfish package fixes security vulnerability: Untrusted...