243 matches found
CVE-2020-19626: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new...
CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details:...
Craft CMS 3 vCard 1.0.0 Remote Code Execution
Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Date: 2020-05-18 Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details: https://gitlab.com/wguest/craftcms-vcard-exploit Version: 1.0.0 Tested o...
CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution
Exploit Title: CraftCMS 3 vCard Plugin 1.0.0 - Remote Code Execution Date: 2020-05-18 Exploit Author: Wade Guest Vendor Homepage: https://craftcms.com/ Software Link: https://plugins.craftcms.com/vcard Vulnerability Details: https://gitlab.com/wguest/craftcms-vcard-exploit Version: 1.0.0 Tested o...
Cross-site Scripting (XSS)
craftcms is vulnerable to cross-site scripting XSS. The vulnerability exists because it does not handle the site name in heading section, allowing an attacker to inject malicious script...
Cross-site Scripting (XSS)
craftcms is vulnerable to Cross-site Scripting XSS. The vulnerability exists because it does not handle the header insertion field when adding source code at an s/admin/entries/news/new URI...
Insecure Authentication Mechanism
craftcms/cms is uses an insecure authentication mechanism. There is no account lockout after multiple failed attempts to log-in and the application does not rate-limit the elevated session password prompt, allowing an attacker to perform a brute-force attack on the log-in function and discover...
Craft CMS 2.7.93.2.5 - Information Disclosure
Craft CMS 2.7.93.2.5 - Information Disclosure Exploit Title : CraftCms Users information disclosure From uploaded File Author Discovered By : Mohammed Abdul Raheem Author's Company Name : TrekShield IT Solution Author Exploit-db : https://www.exploit-db.com/?author=9783 Found Vulnerability On :...
Craft CMS 2.7.9 / 3.2.5 Information Disclosure
Exploit Title : CraftCms Users information disclosure From uploaded File Author Discovered By : Mohammed Abdul Raheem Author's Company Name : TrekShield IT Solution Author Exploit-db : https://www.exploit-db.com/?author=9783 Found Vulnerability On : 20-07-2019 Vendor Homepage:https://craftcms.com...
Information Leakage
craftcms/cms is vulnerable to information leakage. The leakage is possible because it does not adopt the config settings in preserveExifData on image upload, revealing personal/geolocation data to the public...
Privilege Escalation
craftcms/cms is vulnerable to privilege escalation. The vulnerability exists because it does not validate the original user's password and expects impersonated user's password...
Cross-site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not properly validate feed Url fields, allowing a malicious user to inject and execute arbitrary web script...
Denial Of Service (DoS)
craftcms/cms is susceptible to denial of service DoS attacks. Attackers can send password strings with no maximum length limitation, causing the server to perform a complicated hashing algorithm on a long string and hanging the server...
Cross-Site Scripting (XSS)
craftcms/cms is susceptible to cross-site scripting XSS attacks. These attacks exist because the application displays the first name, last name and user name on the user index and user edit pages without properly encoding them...
Cross-Site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not assign the X-Content-Type-Option option to the nosniff header for all CP requests, allowing a malicious user to conduct cross-site scripting through IE/AJAX requests...
Cross-Site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The attacks exist because exception messages are not encoded to prevent from XSS attacks...
Timing Attack
craftcms/cms is vulnerable to timing attack. The application uses the strcmp function that compares hashes in non-constant time, allowing an attacker to use the timing of the request to progressively identify the current PHP session id...
Information Disclosure
craftcms/cms is vulnerable to information disclosure. The application does not ensure that the path passed is safe, allowing a malicious user to have access to any file in the craft/app directory...
Cross-site Scripting (XSS)
craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library is does not restrict direct access to the TemplateController, allowing a malicious user to inject and execute arbitrary web script...