128 matches found
CVE-2026-52307
CVE-2026-52307：1CMS v5.6 认证存储型 XSS 漏洞 简介 本仓库包含 CVE-2026-52307 的复现内容，该漏洞是在 1CMS v5.6 （原 ClassCMS）中发现的一个认证存储型跨站脚本（XSS）漏洞。 本仓库提供了一个概念验证（PoC），用于在本地环境中演示该漏洞，包括详细描述、复现步骤和影响分析。 漏洞描述 ClassCMS 1CMS v5.6 的 栏目管理 组件中存在一个认证存储型跨站脚本（XSS）漏洞。攻击者可通过向 标题 字段注入精心构造的载荷来执行任意 Web 脚本或 HTML。 漏洞类型： 跨站脚本（XSS） 产品厂商： ClassCMS...
CVE-2022-25581
CVE-2022-25581 インターネット上でどこを探しても見つからないため、バックアップを残しておきます。Python エクスプロイトスクリプト 。以下の手順を自動的に実行するためのものです： ✅ スクリプトの機能目標 1. バックエンドにログインする（csrf と token を取得する） 2. 悪意のあるリクエストパケットを構築し、圧縮ファイル（webshell を含む）をアップロードする 3. アップロードした webshell にアクセスして制御権限を取得する（GET shell） 🧾 前提条件 対象環境：ClassCMS 2.4 Webサーバー：PHP 5.5 + MySQ...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307: Improper Neutralization of Input During Web Page Generation
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS 1CMS v5.6 (formerly ClassCMS). The flaw allows an authenticated administrator to inject a crafted payload into the title field on the Article Edit page. When other users view the...
EUVD-2026-72956
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
PT-2026-87172
Name of the Vulnerable Software and Affected Versions ClassCMS 1CMS version 5.6 Description An authenticated stored cross-site scripting XSS issue exists in the Column Management component. This allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the...
EUVD-2024-47918
Malicious code in bioql PyPI...
EUVD-2024-53530
Malicious code in bioql PyPI...
EUVD-2024-48971
Malicious code in bioql PyPI...
EUVD-2024-48972
Malicious code in bioql PyPI...
EUVD-2022-30243
Malicious code in bioql PyPI...
EUVD-2024-50914
Malicious code in bioql PyPI...
EUVD-2024-53532
Malicious code in bioql PyPI...
EUVD-2024-51040
Malicious code in bioql PyPI...
EUVD-2022-30242
Malicious code in bioql PyPI...
CVE-2024-8144
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...