CVE-2025-7713: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers. This issue affects Content Management System CMS: through 21072025...

CVE-2025-7714: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection. This issue affects Content Management System CMS: through 21072025...

CVE-2025-63551: Improper Restriction of XML External Entity Reference

A Server-Side Request Forgery SSRF vulnerability, achievable through an XML External Entity XXE injection, exists in MetInfo Content Management System CMS thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to construct a malicious XML entity that forces the...

PT-2024-13668

Name of the Vulnerable Software and Affected Versions CU Solutions Group CUSG Content Management System CMS versions prior to 7.75 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted...

CVE-2023-48986: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...

CVE-2023-48987: Improper Neutralization of Special Elements used in an SQL Command

Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...

CVE-2023-48985: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...

CVE-2018-20589: Improper Neutralization of Input During Web Page Generation

Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/addpictures.php article ID...

PT-2018-15453

Name of the Vulnerable Software and Affected Versions Ivan Cordoba Generic Content Management System CMS through 2018-04-28 Description The issue concerns a Cross-Site Scripting XSS flaw. It is exploitable via the Administrator/add pictures.php article ID. Recommendations For Ivan Cordoba Generic...

CVE-2018-20590: Improper Neutralization of Input During Web Page Generation

Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...

PT-2018-15454

Name of the Vulnerable Software and Affected Versions Ivan Cordoba Generic Content Management System CMS through 2018-04-28 Description The issue allows for XSS via the Administrator/users.php user ID. Recommendations For Ivan Cordoba Generic Content Management System CMS through 2018-04-28, avoi...

CVE-2018-20568: Improper Neutralization of Special Elements used in an SQL Command

Administrator/index.php in Ivan Cordoba Generic Content Management System CMS through 2018-04-28 allows SQL injection for authentication bypass...

PT-2018-15439

Name of the Vulnerable Software and Affected Versions Ivan Cordoba Generic Content Management System CMS versions through 2018-04-28 Description The issue allows for SQL injection, which can be used for authentication bypass. This means an attacker could potentially gain unauthorized access to th...

PT-2017-5207

Name of the Vulnerable Software and Affected Versions: Ektron Content Management System CMS versions prior to 8.02 SP5 Description: The issue allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data, due to the use of the XslCompiledTransform class wi...

CVE-2012-5357: Undefined Security Weakness

Ektron Content Management System CMS before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data...

CVE-2012-5358: Undefined Security Weakness

The XSLTCompiledTransform function in Ektron Content Management System CMS before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or...

CVE-2016-6201: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ektron Content Management System CMS before 9.1.0.184 SP3 9.1.0.184.3.127 allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx...

CVE-2015-3624: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System CMS before 9.10 SP1 Build 9.1.0.184.1.120 allows remote attackers to hijack the authentication of content administrators for requests that delete content via a...

CVE-2015-4427: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System CMS before 9.10 SP1 Build 9.1.0.184.1.114 allow remote authenticated users to inject arbitrary web script or HTML via the 1 page, 2 action, 3 folderid, or 4 LangType parameter...

CVE-2015-0923: Undefined Security Weakness

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System CMS 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named i...