84 matches found
CVE-2023-5221
ForU CMS contains a code injection vulnerability in /install/index.php via manipulation of the db_name argument. The issue allows remote code execution and has been publicly disclosed. Impact is tied to confidentiality, integrity, and availability at HIGH/CRITICAL levels per CVE-2023-5221, with m...
CVE-2023-5221 ForU CMS index.php code injection
A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/index.php. The manipulation of the argument dbname leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...
PT-2023-31939 · Foru Cms · Foru Cms
Name of the Vulnerable Software and Affected Versions: ForU CMS affected versions not specified Description: A critical vulnerability has been found in ForU CMS, affecting an unknown part of the file /install/index.php. The manipulation of the db name argument leads to code injection. It is...
CVE-2023-5221: Improper Control of Generation of Code
A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/index.php. The manipulation of the argument dbname leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...
ForU CMS Code Injection Vulnerability
ForU CMS is an open source website builder from ForU. ForU CMS suffers from a code injection vulnerability, which originates from an unknown section in /install/index.php and results in code injection via the parameter dbnam...
CVE-2022-3943
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
Cross site scripting
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
CVE-2022-3943
CVE-2022-3943 ForU CMS involves a cross-site scripting vulnerability in the file cms_chip.php, caused by manipulation of the name/argument parameter. The issue is exploitable remotely and has been publicly disclosed (VDB-213450). Across connected sources, affected is an unknown function in cms_ch...
ForU CMS Cross-Site Scripting Vulnerabilities
ForU CMS is a website builder system by ForU Open Source. A security vulnerability exists in ForU CMS that originates from unknown code in cmschip.php. An attacker can exploit the vulnerability to cause cross-site scripting through manipulation of parameter names...
CVE-2022-3943 ForU CMS cms_chip.php cross site scripting
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
CVE-2022-3943: Improper Neutralization
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
CVE-2022-3943 ForU CMS cms_chip.php cross site scripting
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
PT-2022-24968 · Foru Cms · Foru Cms
Name of the Vulnerable Software and Affected Versions: ForU CMS affected versions not specified Description: A problematic issue has been found, affecting an unknown function of the file cms chip.php. The manipulation of the name argument leads to cross-site scripting. It is possible to launch th...
SQL Injection Vulnerability in ForU CMS (CNVD-2021-45390)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...
SQL Injection Vulnerability in ForU CMS (CNVD-2021-45391)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...
ForU CMS suffers from SQL injection vulnerability (CNVD-2020-41223)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
ForU CMS suffers from SQL injection vulnerability (CNVD-2020-41225)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
ForU CMS suffers from SQL injection vulnerability (CNVD-2020-41318)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
ForU CMS suffers from SQL injection vulnerability (CNVD-2020-25783)
ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...