Lucene search
+L

387 matches found

CNNVD
CNNVD
added 2022/12/28 12:00 a.m.13 views

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. FlatPress is vulnerable to a cross-site scripting vulnerability that stems from some unknown processing issues in the component Setupsetup/lib/main.lib.php file that can lead to...

6.1CVSS6AI score0.00512EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/12/28 12:00 a.m.11 views

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support.FlatPress suffers from a cross-site scripting vulnerability that originates in the component XML File Handler/MD File Handler in admin/panels/uploader/admin. The uploader.php file has...

6.1CVSS6.1AI score0.00512EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.7 views

PT-2022-28123 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic vulnerability was found in FlatPress, affecting the onupload function of the admin/panels/uploader/admin.uploader.php file in the XML File Handler/MD File Handler component...

6.1CVSS4AI score0.00512EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.15 views

PT-2022-28124 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue has been found in FlatPress, affecting some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scriptin...

6.1CVSS3.8AI score0.00512EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/12/28 12:00 a.m.34 views

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blogging system from the FlatPress community that does not require database support. A cross-site scripting vulnerability exists in FlatPress, which stems from a problem with an unknown part of the admin/panels/entry/admin.entry.list.php file in the Admin Area component...

6.1CVSS5.9AI score0.00518EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.12 views

PT-2022-28122 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic vulnerability has been found in FlatPress, affecting an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads ...

6.1CVSS4.2AI score0.00518EPSS
SaveExploits0References7
NVD
NVD
added 2022/12/27 10:15 a.m.34 views

CVE-2022-4755

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

6.1CVSS0.00518EPSS
SaveExploits0References4
Prion
Prion
added 2022/12/27 10:15 a.m.26 views

Cross site scripting

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

5.8CVSS6.1AI score0.00518EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/27 9:39 a.m.38 views

CVE-2022-4755 FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

3.5CVSS6.5AI score0.00518EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/27 9:39 a.m.24 views

CVE-2022-4755 FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

3.5CVSS4AI score
SaveExploits0References6
CVE
CVE
added 2022/12/27 9:39 a.m.64 views

CVE-2022-4755

FlatPress vulnerability CVE-2022-4755 affects the Mediamanager plugin’s panel.mediamanager.file.php main function. The issue arises from unvalidated handling of the mm-newgallery-name argument, enabling cross-site scripting. Exploitation may be remote; patch d3f329496536dc99f9707f2f295d571d65a496...

6.1CVSS4.8AI score0.00518EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/12/27 9:15 a.m.36 views

CVE-2022-4748

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

9.8CVSS0.00867EPSS
SaveExploits0References4
Prion
Prion
added 2022/12/27 9:15 a.m.26 views

Path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

7.5CVSS9.4AI score0.00867EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/27 8:26 a.m.42 views

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

5.5CVSS9.8AI score0.00867EPSS
SaveExploits0References4
CVE
CVE
added 2022/12/27 8:26 a.m.77 views

CVE-2022-4748

CVE-2022-4748 affects FlatPress; vulnerable component is the function doItemActions in fp-plugins/mediamanager/panels/panel.mediamanager.file.php (File Delete Handler). The issue arises from improper handling of the argument deletefile , enabling path traversal . Root cause: manipulation of delet...

9.8CVSS7.6AI score0.00867EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/12/27 8:26 a.m.45 views

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

5.5CVSS6AI score
SaveExploits0References6
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.8 views

FlatPress 路径遍历漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a path traversal vulnerability , the vulnerability stems from the component File Delete Handler in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the function...

9.8CVSS6.3AI score0.00867EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.9 views

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a cross-site scripting vulnerability, the vulnerability stems from a problem with the function main in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the component...

6.1CVSS4.8AI score0.00518EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/27 12:00 a.m.10 views

PT-2022-28074 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue was found in FlatPress, affecting the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the Media Manager Plugin. The manipulatio...

6.1CVSS4.2AI score0.00518EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/12/27 12:00 a.m.9 views

PT-2022-28064 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A critical issue was found in FlatPress, affecting the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler...

9.8CVSS5.9AI score0.00867EPSS
SaveExploits0References8
Rows per page
Query Builder