CVE-2023-24674

Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...

CVE-2023-24674

Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter...

Bludit CMS Security Vulnerability

Bludit is an open source lightweight blog content management system CMS. A security vulnerability exists in Bludit CMS version v.4.0.0, which stems from a vulnerability that allows a local attacker to escalate privileges via the role:admin parameter...

iCMS 访问控制错误漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. An access control error vulnerability exists in iCMS versions prior to 2.16.1, which stems from incorrect access control in the administrator account management function...

iCMS2 跨站脚本漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in iCMS2 versions prior to 2.16.1-git, which is rooted in vulnerability to stored cross-site scripting XSS attacks...

iCMS2 跨站脚本漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A cross-site scripting vulnerability exists in iCMS2 versions prior to 2.16.1, which stems from vulnerability to reflective cross-site scripting XSS attacks...

CVE-2023-39578

A stored cross-site scripting XSS vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field...

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

CVE-2023-39599

Cross-Site Scripting XSS vulnerability in CSZ CMS v.1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Social Settings parameter...

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in CSZ CMS version v.1.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via the Social Settings parameter using a crafted payload...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from the incorrect manipulation of the parameter id can lead to sql injection...

CVE-2023-38911

A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields...

PT-2023-36386 · Undefined · Undefined

🚨 CVE-2023-38911 A Cross-Site Scripting XSS vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields. 🎖@cveNotify...

CSZ CMS 跨站脚本漏洞

CSZ CMS is an open source PHP-based content management system CMS. A security vulnerability exists in CSZ CMS version 1.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary code via the Gallery parameter in the YouTube URL field using a carefully crafted payload...

Ghost Arbitrary File Read Vulnerability

Ghost is an open source content management system . Ghost suffers from an arbitrary file read vulnerability that stems from the program failing to properly filter for special elements in a resource or file path. An attacker can exploit this vulnerability to read arbitrary files...

Minimati SQL注入漏洞

Minimati is a simple, lightweight and open source CMS by Kidus Personal Developers. A security vulnerability exists in Minimati version v.1.0.0, which stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via the edit.php component...

CVE-2023-40028 Arbitrary file read via symlinks in Ghost

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can...

Ghost Foundation Ghost 后置链接漏洞

Ghost is an open source content management system . Ghost suffers from an arbitrary file read vulnerability that stems from the program failing to properly filter for special elements in a resource or file path. An attacker can exploit this vulnerability to read arbitrary files...

ThinkCMF Cross-Site Scripting Vulnerability

ThinkCMF is a CMS Content Management System based on ThinkPHP. A cross-site scripting vulnerability exists in ThinkCMF version 5.1.5, which stems from the lack of effective filtering and escaping of user-supplied data in the file UserController.php, and can be exploited by an attacker to execute...

SEMCMS File Upload Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A file upload vulnerability exists in SEMCMS version 3.9, which stems from the application's lack of effective validation of uploaded files and can be exploited by an attacker to run arbitrary code via...