387 matches found
FlatPress Cross-Site Scripting Vulnerability (CNVD-2020-75633)
FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...
CVE-2020-35241
FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
CVE-2020-35241
FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
Cross site scripting
FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
CVE-2020-35241
FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
CVE-2020-35241
FlatPress 1.0.3 is affected by a cross-site scripting (XSS) vulnerability in the Blog Content component (CVE-2020-35241). An attacker can inject arbitrary script via the admin panel, and when a user visits the affected blog page the payload executes, potentially allowing cookie theft. Exploit det...
Flatpress 跨站脚本漏洞
FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...
PT-2020-17298 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: FlatPress version 1.0.3 Description: The issue allows an attacker to inject a cross-site scripting XSS payload in blog content via the admin panel. When a user visits the affected blog page, the XSS payload is triggered, potentially allowing...
Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting
Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting Date: 2020-09-19 Exploit Author: Alperen Ergel Vendor Homepage: https://www.flatpress.org/ Software Link: https://github.com/evacchi/flatpress/releases/tag/v1.0.3 Version: 1.0.3 Tested on: windows 10 / xampp CVE :...
Flatpress Add Blog 1.0.3 Cross Site Scripting
Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting Google Dork: - Date: 2020-09-19 Exploit Author: Alperen Ergel Vendor Homepage: https://www.flatpress.org/ Software Link: https://github.com/evacchi/flatpress/releases/tag/v1.0.3 Version: 1.0.3 Tested on: windows 10 / xampp...
Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload
Exploit for php platform in category web applications FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpre...
Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload
Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec...
Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload
FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.value; window.openurl+cmdexec,"ZSLiframe"; functi...
FlatPress 1.0.3 Cross Site Request Forgery / Shell Upload
FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.v...
FlatPress 1.0.3 CSRF Arbitrary File Upload
Summary FlatPress is a blogging engine that saves your posts as simple text files. Forget about SQL! You just need some PHP. Description The vulnerability is caused due to the improper verification of uploaded files via the Uploader script using 'upload' POST parameter which allows of arbitrary...
FlatPress 1.0 Cross Site Scripting
Affected software: FlatPress 1.0 Type of vulnerability:stored xss URL:http://www.opensourcecms.com/scripts/details.php?scriptid=77&name=FlatPress Discovered by: provensec Website: provensec.com version: FlatPress 1.0 Proof of concept adding a new entry with xss payload will lead to stored cross...
CVE-2014-100036
Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...
Cross site scripting
Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...
CVE-2014-100036
CVE-2014-100036 is an XSS vulnerability affecting FlatPress 1.0.2, where an attacker can inject arbitrary web script or HTML via the content parameter to the default URI. The root cause is a failure to properly sanitize user-supplied content in the default URI handling, enabling reflected or stor...