525 matches found
CVE-2020-17542
Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...
Cross site scripting
Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...
CVE-2020-17542
Cross Site Scripting XSS in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin//c/workflow" component...
CVE-2020-17542
DotCMS v5.1.5 has a Cross Site Scripting (XSS) vulnerability in the Task Detail comment window of the /dotAdmin/#/c/workflow component that could allow a remote attacker to execute arbitrary code. Affected product/endpoint: dotCMS 5.1.5, component: Task Detail in the workflow editor. Root cause: ...
dotCMS 跨站脚本漏洞
Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS v5.1.5, which can be exploited by a remote...
File Upload Vulnerability in dotCMS
dotCMS is a content management system CMS. A file upload vulnerability exists in dotCMS, which can be exploited by an attacker to upload arbitrary files...
dotCMS SQL Injection Vulnerability (CNVD-2021-00829)
dotcms is a powerful Content Management System CMS developed in Java. A SQL injection vulnerability exists in dotCMS versions prior to 20.10.1. An attacker can exploit this vulnerability to conduct SQL injection attacks via the /api/v1/containers orderby parameter...
CVE-2020-27848
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user mus...
CVE-2020-27848
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user mus...
Sql injection
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user mus...
CVE-2020-27848
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user mus...
CVE-2020-27848
CVE-2020-27848 affects dotCMS versions before 20.10.1. The vulnerability is an SQL injection in the REST endpoint /api/v1/containers (orderby parameter) caused by unsanitized orderBy handling in the PaginatorOrdered classes. An authenticated manager is required to exploit. Public sources indicate...
Dotcms dotCMS SQL注入漏洞
dotcms is a powerful Content Management System CMS developed in Java. A SQL injection vulnerability exists in dotCMS versions prior to 20.10.1. An attacker can exploit this vulnerability to conduct SQL injection attacks via the /api/v1/containers orderby parameter...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
Cross site scripting
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by stored XSS that could let an attacker gain remote privileges and potentially steal cookies. The vulnerability is described as stored XSS in the admin template functionality, enabling a compromise of a website or web application through XSS...
DotCMS Add Template with admin panel Cross-site Scripting Vulnerability
Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports modules such as RSS feeds, blogs, and forums, and is easy to extend and build. DotCMS Add Template with admin panel 20.11 suffers from a cross-site scripting vulnerability that allows...