Sql injection

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

CVE-2018-19559

CVE-2018-19559 affects CuppaCMS prior to 2018-11-12. The vulnerability is a SQL injection in the file administrator/classes/ajax/functions.php via the reference_id parameter, allowing a remote attacker to execute arbitrary SQL commands. CVSS metrics from NVD indicate a high to critical impact: CV...

CVE-2018-19559

CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the referenceid parameter...

CuppaCMS SQL Injection Vulnerability

CuppaCMS is a content management system CMS. A SQL injection vulnerability exists in the administrator/classes/ajax/functions.php file in CuppaCMS 2018-11-12 and earlier versions. A remote attacker can exploit the vulnerability to execute SQL commands with the help of 'referenceid' parameter...

CVE-2018-17300

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...

CVE-2018-17300

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...

Cross site scripting

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...

CVE-2018-17300

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator//component/tablemanager/view/cumenus section name...

CVE-2018-17300

CVE-2018-17300 affects CuppaCMS (versions up to 2018-09-03). The vulnerability is a Stored Cross-Site Scripting (XSS) in the admin UI, triggered via the Administrator path administrator/#/component/table_manager/view/cu_menus by supplying a crafted value for the section name field. Documents desc...

CuppaCMS Cross-Site Scripting Vulnerability

CuppaCMS is a content management system CMS. A cross-site scripting vulnerability exists in CuppaCMS 2018-09-03 and prior versions. A remote attacker can exploit the vulnerability by sending the 'section' parameter to the administrator//component/tablemanager/view/cumenus URL to inject malicious...