47 matches found
CVE-2018-18210
CVE-2018-18210 shows a Cross-Site Scripting (XSS) vulnerability in DiliCMS 2.4.0 exploited via the attachment_url parameter of admin/index.php/setting/site?tab=site_attachment. Multiple databases describe XSS that can be used to inject scripts and potentially access sensitive information. Exploit...
DiliCMS Cross-Site Scripting Vulnerability
DiliCMS aka DiligentCMS is a content management system CMS based on Codelgniter. A cross-site scripting vulnerability exists in the System Settings - Site Settings filing number field of the admin/index.php file in DiliCMS version 2.4.0. A remote attacker can exploit this vulnerability to inject...
Cross site scripting
An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...
CVE-2018-10430
An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...
CVE-2018-10430
An issue was discovered in DiliCMS aka DiligentCMS 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting-site setting" of admin/index.php...
CVE-2018-10430
DiliCMS 2.4.0 has a Stored XSS vulnerability in the admin/index.php, specifically in the fourth textbox of System setting → site setting. The issue is described across multiple connected sources as a stored XSS; no exploit details are provided in the documents. The root cause and impact are limit...
