Pomash 跨站脚本漏洞

Pomash is a lightweight blogging system by the individual developer of JmPotato. Pomash suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameters article.title/content.title/article.tag leading to cross-site scripting...

PT-2022-8061 · Unknown · Jmpotato Pomash

Name of the Vulnerable Software and Affected Versions: JmPotato Pomash affected versions not specified Description: A problematic vulnerability was found in JmPotato Pomash, affecting an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the article.title,...

CVE-2022-4350

A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument contenttitle leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed ...

PT-2022-26947 · Mingsoft · Mingsoft Mcms

Name of the Vulnerable Software and Affected Versions: Mingsoft MCMS version 5.2.8 Description: A problematic issue was found in Mingsoft MCMS, affecting an unknown function of the file search.do. The manipulation of the content title argument leads to cross-site scripting. It is possible to laun...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A security vulnerability exists in MingSoft MCMS version 5.2.8, which stems from the manipulation of the contenttitle parameter by an unknown function in the search.do file, leading to cross-site scripting. The attack meth...

CVE-2017-18639

Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages...

Umbraco CMS Cross-Site Scripting Vulnerability (CNVD-2018-24258)

Umbraco CMS is a Danish Umbraco company using ASP.Net build , Mysql for data storage content management system CMS. The system supports customized templates , manage users , rights definition of content and so on. A cross-site scripting vulnerability exists in Umbraco CMS version 7.12.3. A remote...

CVE-2018-9993

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

CVE-2018-9993

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

CVE-2018-9993

The CVE-2018-9993 entry concerns YUNUCMS 1.0.7, with a Cross-Site Scripting (XSS) vulnerability via the content title on the admin/content/addcontent/cid/## page (news center). The connected Red Hat, CNVD, CNVD-like, and NVD records consistently describe XSS in this CMS version. The provided docu...

CVE-2012-5500

CVE-2012-5500 affects Plone’s batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1. Root cause: CSRF token-based request path allows a remote attacker to change the titles of content items. Impact stated: unauthorized modification of content item titles. Ex...