126 matches found
CVE-2023-43356-CMSmadesimple-Stored-XSS---Global-Settings
CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en los Metadatos Globales en el menú de Configuración - Configuración Global...
CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user
CMSmadesimple Reflected XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in install/adduser.php of CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again in the My Preferences - Add...
CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...
CVE-2023-43352-CMSmadesimple-SSTI--Content
CMSmadesimple SSTI v2.2.18 Author: Sergio Description: Server Side Template Injection SSTI vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Attack Vectors: A SSTI...
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu. Attack Vectors: Scripting A vulnerability in the...
CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager
CMSmadesimple File Upload - XSS v2.2.18 Author: Sergio Description: File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in File Manager file upload sanitation allows you to upload a PDF file with hidden...
CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data in the Content Manager Menu. Attack Vectors:...
Babel - Open Redirect
Babel contains an open redirect vulnerability via redirect.php in the newurl parameter. An attacker can use any legitimate site using Babel to redirect user to a malicious site, thus possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations. id:...
CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the My Preferences - Manage Shortcuts Attack Vectors: Scripting A vulnerability in the...
CVE-2023-43358-CMSmadesimple-Stored-XSS---News
CMSmadesimple Stored XSS v2.2.18 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in CMSmadesimple v.2.2.18 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel campo Title del menu Content - News. Vettori di attacco:...
CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension
CMSmadesimple Stored XSS v2.2.18 Autore: Sergio Descrizione: Vulnerabilità Cross Site Scripting in CMSmadesimple v.2.2.18 che consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nei Profili dell'editor Extensions - MicroTiny WYSIWYG. Vettori di...
CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation
Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...
CVE-2023-43339
Cross-Site Scripting XSS vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User or Database Port components...
CVE-2023-43357
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...
CVE-2023-43353
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component...
CVE-2023-43358
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component...
CVE-2023-43354
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component...
EUVD-2018-1864
Malware in sbrugna...