EUVD-2005-3981

Malware in sbrugna...

CVE-2025-6870

CVE-2025-6870 affects SourceCodester Simple Company Website 1.0. Affected component: the file /classes/Content.php?f=service, where manipulation of the parameter img enables unrestricted upload. Root cause stated as improper handling of the img argument allowing remote exploitation; exploitation ...

CVE-2025-6870 SourceCodester Simple Company Website Content.php unrestricted upload

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...

CVE-2025-6870: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...

CVE-2020-23976

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23979

13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23981

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...

CVE-2020-20122

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...

CVE-2024-10356: Exposure of Sensitive Information to an Unauthorized Actor

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

PT-2024-34424

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/add content.php endpoint via the title and content parameters. Recommendations: For version 1.0, consider restricting access...

Cross site scripting

Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...

CVE-2024-25297: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...

CVE-2024-25297

CVE-2024-25297 is a Cross Site Scripting (XSS) vulnerability in Bludit CMS 3.15 exploitable via the endpoint edit-content.php . Multiple connected sources describe that remote attackers can execute arbitrary code and access sensitive information through this vector. Exploitation details in public...

CVE-2024-25297

Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...

CVE-2024-25297

Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...

Sql injection

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413

CVE-2020-20413 affects WUZHICMS v4.1.0. A SQL injection in the checktitle() function of admin/content.php enables a remote attacker to execute arbitrary code. The vulnerability is described across multiple security feeds as a high-severity issue (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No...

CVE-2020-20413: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

PT-2023-11551

Name of the Vulnerable Software and Affected Versions WUZHICMS version 4.1.0 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php. Recommendations For WUZHICMS version 4.1.0, consider disabling the checktitle functio...