Lucene search
+L

88 matches found

CVE
CVE
•added 2024/05/24 6:31 a.m.•66 views

CVE-2023-1111

FastCMS up to 0.1.5 is affected. The issue exists in the New Article Tab functionality where manipulating the Title argument triggers cross-site scripting. The attack can be performed remotely, and public exploits have been disclosed. No remediation details are provided in the referenced documents.

5.1CVSS3.3AI score0.00321EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/24 6:31 a.m.•25 views

CVE-2023-1111 FastCMS New Article Tab cross site scripting

A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.1CVSS6.2AI score0.00321EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•3 views

CVE-2023-1111: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.1CVSS3.7AI score0.00321EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2023/06/23 12:00 a.m.•388 views

fastCMS Blogging 3.1.0 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/05/28 12:00 a.m.•16 views

FastCMS 跨站脚本漏洞

FastCMS is a content management system from FastCMS, Inc. A cross-site scripting vulnerability exists in FastCMS version 0.1.5, which can be exploited by attackers to conduct cross-site scripting attacks...

5.1CVSS6.1AI score0.00321EPSS
SaveExploits1References4
NVD
NVD
•added 2023/03/06 8:15 a.m.•24 views

CVE-2023-1191

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

7.2CVSS5.5AI score0.00908EPSS
SaveExploits1References4
Prion
Prion
•added 2023/03/06 8:15 a.m.•30 views

Path traversal

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

5.8CVSS7AI score0.00908EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/03/06 7:21 a.m.•39 views

CVE-2023-1191 fastcms ZIP File TemplateController.java path traversal

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

5.8CVSS7.2AI score0.00908EPSS
SaveExploits1References4
CVE
CVE
•added 2023/03/06 7:21 a.m.•73 views

CVE-2023-1191

CVE-2023-1191 affects the fastcms ZIP File Handler, specifically the file path admin/TemplateController.java. Multiple connected sources describe a path traversal vulnerability that can be exploited remotely, with public disclosure of exploits. The initial descriptions note that the product does ...

7.2CVSS5.8AI score0.00908EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•3 views

CVE-2023-1191: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

7.2CVSS5.3AI score0.00908EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/06 12:00 a.m.•17 views

PT-2023-16811 · Fastcms · Fastcms

Name of the Vulnerable Software and Affected Versions: fastcms affected versions not specified Description: A problematic vulnerability has been found in fastcms, affecting an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path...

7.2CVSS5.1AI score0.00908EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/03/06 12:00 a.m.•19 views

FastCMS 路径遍历漏洞

FastCMS is a content management system from FastCMS, Inc. FastCMS suffers from a path traversal vulnerability. An attacker can use this vulnerability to access files and directories stored outside of the web root folder...

7.2CVSS5.7AI score0.00908EPSS
SaveExploits1References6
OSV
OSV
•added 2023/02/02 4:19 p.m.•9 views

CVE-2023-0651

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

9.8CVSS6.2AI score0.00756EPSS
SaveExploits0References5
NVD
NVD
•added 2023/02/02 4:19 p.m.•36 views

CVE-2023-0651

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

9.8CVSS7.2AI score0.00756EPSS
SaveExploits0References5
Prion
Prion
•added 2023/02/02 4:19 p.m.•40 views

Design/Logic Flaw

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

6.5CVSS9.5AI score0.00756EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2023/02/02 1:42 p.m.•112 views

CVE-2023-0651

The CVE-2023-0651 entry concerns FastCMS 0.1.0, specifically the Template Management component. The vulnerability allows unrestricted upload due to an unclear handling of uploads, enabling remote exploitation. Multiple connected sources reiterate the impact and remote exploitability; public discl...

9.8CVSS8.1AI score0.00756EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2023/02/02 1:42 p.m.•56 views

CVE-2023-0651 FastCMS Template Management unrestricted upload

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

6.5CVSS9.8AI score0.00756EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/02 12:00 a.m.•1 views

CVE-2023-0651: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b...

9.8CVSS5.3AI score0.00756EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/02 12:00 a.m.•16 views

PT-2023-16428 · Fastcms · Fastcms

Name of the Vulnerable Software and Affected Versions: FastCMS version 0.1.0 Description: A critical issue has been found in the Template Management component of FastCMS, allowing for unrestricted upload. This can be exploited remotely. The issue has been publicly disclosed and may be used for...

9.8CVSS7AI score0.00756EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2023/02/02 12:00 a.m.•17 views

FastCMS 代码问题漏洞

FastCMS is a content management system from FastCMS, Inc. A code issue vulnerability exists in FastCMS version 0.1.0, which stems from unknown handling of the component Template Management, resulting in unrestricted uploads...

9.8CVSS6.9AI score0.00756EPSS
SaveExploits0References7
Rows per page
Query Builder