397 matches found
CVE-2017-14193
The CVE-2017-14193 entry concerns dayrui FineCms 5.0.11, where the oauth function in controllers/member/api.php is vulnerable to cross-site scripting via the Referer HTTP header when accessed from Internet Explorer. This is the explicit vulnerable component and vector described in the connected d...
CVE-2017-14194
The CVE-2017-14194 entry concerns dayrui FineCms version 5.0.11, where the out function in controllers/member/Login.php is reported to have an XSS vulnerability related to the Referer HTTP header in Internet Explorer. Multiple connected records (NVD, Red Hat, CNVD, CVE list mirrors, and regional ...
CVE-2017-14195
The CVE-2017-14195 entry describes an XSS vulnerability in dayrui FineCms 5.0.11, specifically in the call_msg function of controllers/Form.php. The issue is triggered by the Referer HTTP header (noted for Internet Explorer) and is described across multiple sources as cross-site scripting, with p...
CVE-2017-14192: Improper Neutralization of Input During Web Page Generation
The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field...
CVE-2017-14195: Improper Neutralization of Input During Web Page Generation
The callmsg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explorer...
CVE-2017-14194: Improper Neutralization of Input During Web Page Generation
The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer...
CVE-2017-14193: Improper Neutralization of Input During Web Page Generation
The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer...
PT-2017-13295
Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to the oauth function in the controllers/member/api.php file, which has an XSS vulnerability concerning the Referer HTTP header, specifically with Internet Explorer. Recommendations For...
PT-2017-13297
Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to the call msg function in the controllers/Form.php file, potentially allowing XSS attacks related to the Referer HTTP header, specifically with Internet Explorer. Recommendations For...
PT-2017-13296
Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to an XSS vulnerability in the out function in controllers/member/Login.php. This vulnerability is triggered by the Referer HTTP header and affects Internet Explorer. Recommendations For...
PT-2017-13294
Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to an XSS concern in the checktitle function, specifically in the module field within the controllers/member/api.php file. Recommendations For FineCms version 5.0.11, consider disabling t...
FineCMS 1.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...
FineCMS 1.0 Cross Site Scripting / SQL Injection
Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: sohaip-hackerDZ Author Web:...
FineCMS 1.0 - Multiple Vulnerabilities
FineCMS 1.0 - Multiple Vulnerabilities Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author:...
FineCMS 1.0 - Multiple Vulnerabilities
Exploit Title: FineCMS 1.0 Multiple Vulnerabilities Dork: N/A Date: 29.08.2017 Vendor Homepage : http://mvc.net.pl/ Software Link: https://github.com/andrzuk/FineCMS Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: sohaip-hackerDZ Author Web:...
FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-26444)
FineCms is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the controllers/member/api.php file in FineCms version 5.0.11. A remote attacker can exploit this vulnerability to inject arbitrary Web script or...
CVE-2017-13697
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable...
Cross site scripting
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable...
