150 matches found
CuppaCMS path traversal vulnerability
CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...
CuppaCMS 路径遍历漏洞
CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...
CuppaCMS SQL Injection Vulnerability (CNVD-2022-22322)
CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS, which stems from the lack of validation of externally entered SQL statements in the database-based application. An attacker could exploit this vulnerability to execute illegal SQL commands...
CuppaCMS SQL注入漏洞
CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS, which stems from the lack of validation of externally entered SQL statements in the database-based application. An attacker could exploit this vulnerability to execute illegal SQL commands...
Authenticated-RCE-CuppaCMS
Authenticated-RCE-CuppaCMS CuppaCMS is vulnerable to Authentic...
CuppaCMS Elevation of Privilege Vulnerability
CuppaCMS is a Content Management System CMS. An elevation of privilege vulnerability exists in CuppaCMS, which stems from a faulty programmatic call to a high-level native procedure. An authenticated attacker uses the usergroupidfield parameter to gain escalated privileges via a crafted POST...
CuppaCMS 安全漏洞
CuppaCMS is a Content Management System CMS. An elevation of privilege vulnerability exists in CuppaCMS, which stems from a faulty programmatic call to a high-level native procedure. An authenticated attacker uses the usergroupidfield parameter to gain escalated privileges via a crafted POST...
CVE-2020-26048
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...
Design/Logic Flaw
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...
CVE-2020-26048
CVE-2020-26048 relates to CuppaCMS prior to 2019-11-12, where an authenticated attacker can upload a malicious file masquerading as an image and, via a rename function in the file manager, convert the image extension to PHP, enabling remote arbitrary code execution. The vulnerability combines an ...
CVE-2020-26048
The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote...
CuppaCMS Cross-Site Scripting Vulnerability (CNVD-2019-00811)
CuppaCMS is a content management system CMS. A cross-site scripting vulnerability exists in CuppaCMS. A remote attacker can exploit this vulnerability by uploading a specially crafted SVG document to the administrator//component/tablemanager/view/cuviews URI to execute JavaScript script...
Cross site scripting
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
CVE-2018-19918
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
CVE-2018-19918
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
CVE-2018-19918
CVE-2018-19918 — CuppaCMS XSS via SVG upload : The vulnerability affects CuppaCMS, where uploading a crafted SVG to the administrator/#/component/table_manager/view/cu_views URI enables cross-site scripting. The issue is categorized with a CVSS v3.1 base score of 5.4 (MEDIUM): network attack vect...
CVE-2018-19918
CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...
PT-2018-15163 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: CuppaCMS affected versions not specified Description: The issue is related to a Cross-Site Scripting XSS attack. It occurs when an SVG document is uploaded to the administrator//component/table manager/view/cu views URI, allowing malicious...
