8536 matches found
Double free
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users like author in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched...
MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-08321)
MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A cross-site scripting vulnerability exists in MediaWiki 1.37 and earlier versions. The vulnerability...
The vulnerability in the Crafter CMS content management system’s /scripts/*, /templates/*, and /.git/* directories allows a hacker to read the textual content through FreeMarker.
The vulnerability of /scripts/, /templates/, and /.git/ in the Crafter CMS content management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to read the textual content through FreeMarker remotely...
Arbitrary File Upload Vulnerability in BossCMS
BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. BossCMS has an arbitrary file upload vulnerability that can be exploited by attackers to gain control of the server...
CSCMS has unspecified vulnerabilities
CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...
Qibosoft licensing issue vulnerability
Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to licensing issues, which can be exploited by attackers to arbitrarily delete files...
Qibosoft Cross-Site Request Forgery Vulnerability (CNVD-2022-02758)
Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to cross-site request forgery, which can be exploited by attackers to arbitrarily add administrator accounts...
Unauthorized Access Vulnerability in BossCMS
BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. An unauthorized access vulnerability exists in BossCMS, which can be exploited by attackers to obtain sensitive information...
CVE-2020-21238
An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...
CVE-2020-21237
An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...
WordPress plugin Survey
WordPress is a blogging platform based on the PHP language that can be used to set up websites on servers that support PHP and MySQL databases, and can also be used as a content management system CMS.Survey...
Qibosoft 跨站请求伪造漏洞
Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to cross-site request forgery, which can be exploited by attackers to arbitrarily add administrator accounts...
CSCMS 安全漏洞
CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...
Qibosoft qibosoft 跨站请求伪造漏洞
Qibosoft qibosoft is a content management system CMS from Qibosoft China. qibosoft suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to publish malicious articles...
GlFusion Cms Arbitrary User Registration Vulnerability
glFusion CMS is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to arbitrary user registration, which can be exploited by attackers to register using any user's email address...
glFusion CMS Licensing Issue Vulnerability
GlFusion Cms is a content management and publishing system. glFusion CMS v1.7.9 is vulnerable to an authorization issue, which can be exploited by attackers via /publichtml/users.php...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2022-02733)
WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. version 4.1.0 of WUZHI CMS has a cross-site scripting vulnerability that can be exploited by attackers to steal cookies from administrators...
ThinkCMF Injection Vulnerability
ThinkCMF is a CMS Content Management System based on ThinkPHP. thinkCMF version X2.2.2 has a security vulnerability that can be exploited by attackers to execute arbitrary code via a crafted package...
S-CMS cross-site scripting vulnerability in Zibo Shining Network Technology Co.
S-CMS is a PHP and MySQL-based content management system CMS from S-CMS China. A security vulnerability exists in S-CMS Government Station Building System v5.0, which can be exploited by attackers to execute cross-site scripting attack XSS via /function/booksave.php...