Django-photologue cross-site scripting vulnerabilities

Django-photologue is a powerful image management and gallery application for the Django web framework by Richard Barran, an individual developer. A security vulnerability exists in Django-photologue versions prior to 3.15.1, which stems from some unknown functionality in the Default Template...

CVE-2020-6632

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/template/header.tpl, and themes/new-theme/js/header.js...

PT-2020-19197

Name of the Vulnerable Software and Affected Versions PrestaShop version 1.7.6.2 Description The issue is related to a potential XSS occurrence during the addition or removal of a QuickAccess link. This is associated with specific files, including AdminQuickAccessesController.php,...

CVE-2020-6632: Improper Neutralization of Input During Web Page Generation

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/template/header.tpl, and themes/new-theme/js/header.js...

MISP Cross-Site Scripting Vulnerability (CNVD-2019-12145)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and features threat cybersecurity event analysis and malware analysis hood. A cross-site scripting vulnerability exists in the default distribution template in the...

CVE-2019-8933: Unrestricted Upload of File with Dangerous Type

In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory without being blocked by the Web Application Firewall, and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on...

CVE-2018-19195

An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\showproduct.html file...

Huge-IT Slideshow Cross-Site Scripting Vulnerability

Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...

Dtcms default template file has cross-site scripting vulnerability

dtcms is a content management system developed based on c. A cross-site scripting vulnerability exists in the default template file of dtcms version V4.0, due to the absence of strict filtering of image thumbnails and title fields in the default template file. An attacker is allowed to exploit th...

Golabi CMS Remote File Inclusion

-------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR -------------------------------------------------------------------------------- Golabi CMS Remote File Inclusion Vulnerability + Application Info: Name: Golabi CMS Author:...

Golabi CMS 1.0 - Remote File Inclusion

Golabi CMS 1.0 - Remote File Inclusion -------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ /| | \ /|| / / | /| /\ / \ / / / // / /// / -------------------------------------------------------------------------------- wWw.CrazyAngel.iR -...

Golabi CMS 1.0 - Remote File Inclusion

-------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ /| | \ /|| / / | /| /\ / \ / / / // / /// / -------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR...