CVE-2020-20413

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20122

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...

Sql injection

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...

PT-2021-10432

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1 Description: The issue is related to a SQL injection vulnerability in the checktitle function located in the /coreframe/app/content/admin/content.php file. This vulnerability can be exploited through the API endpoint...

CVE-2020-20122: Improper Neutralization of Special Elements used in an SQL Command

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...

Wuzhi WUZHI CMS SQL Injection Vulnerability

WUZHI CMS WUZHI CMS is a high-performance open source content management system , support for LNAMP architecture , suitable for portals , corporate Web site , mobile site , microblogging promotion. WUZHI CMS 4.1.0 version of the /coreframe/app/content/admin/content.php in the checktitle function...

PT-2021-16451

Name of the Vulnerable Software and Affected Versions: SourceCodester Content Management System version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter to the "content management systemadmin ew content.php" endpoint. This enables...

PT-2021-17737

Name of the Vulnerable Software and Affected Versions: ImpressCMS profile version 1.4.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML parameters through the Display Name field in the modules/content/admin/content.php file, enabling cross-site scripting XSS...

CVE-2021-28088: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...

CVE-2020-23979

13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23981

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...

CVE-2020-23981

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...

Cross site scripting

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...

Sql injection

13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23976

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...

Sql injection

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23981

CVE-2020-23981 affects 13enforme CMS 1.0 with a Cross Site Scripting flaw in the content.php id parameter. The NVD entry lists CVSSv2/3.1 base scores of 4.3 (MEDIUM) and 6.1 (MEDIUM) respectively, indicating potential impact to confidentiality and integrity. No vendor/version-specific remediation...

CVE-2020-23981

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...

CVE-2020-23979

CVE-2020-23979 affects 13enforme CMS 1.0, with a SQL Injection via the content.php id parameter. The NVD notes a Network attack vector, LOW complexity, no authentication, and partial confidentiality, integrity, and availability impacts (CVSS v2: 7.5 HIGH; CVSS v3.1: 9.8 CRITICAL). Connected docum...