CVE-2020-18646

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

CVE-2020-18646: Exposure of Resource to Wrong Sphere

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php"...

PT-2021-10192

Name of the Vulnerable Software and Affected Versions: NoneCMS version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved via the component "/public/index.php". Recommendations: For NoneCMS version 1.3, consider restricting access to the...

CVE-2020-18648: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMSv1.0/admin/index.php?c=administrator&a=add"...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

Cross site scripting

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

CVE-2020-19511 affects Typesetter 5.1. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the index.php/Admin/Classes interface, specifically through the className and Description fields. Descriptions across multiple connected sources confirm the editable fields in the admin U...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

CVE-2020-19511

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

PT-2021-3388

Name of the Vulnerable Software and Affected Versions Typesetter version 5.1 Description The issue is related to a Cross Site Scripting vulnerability. It is associated with the failure to take measures to protect the structure of web pages, specifically through the className and Description field...

CVE-2020-19511: Improper Neutralization of Input During Web Page Generation

Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1 className and !2 Description fields in index.php/Admin/Classes,...

PT-2021-3361

Name of the Vulnerable Software and Affected Versions LaikeTui version 3.5.0 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a ZIP archive containing a .php file. This can be achieved by using the "index.php?module=system&action=pay" endpoint to...

CVE-2021-34128: Unrestricted Upload of File with Dangerous Type

LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname...

PT-2021-4037

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.0 Description The issue is related to the index.php/appointment/insert patient add appointment endpoint in Chikitsa Patient Management System, which allows for XSS due to lack of protection measur...

PT-2021-4035

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.0 Description The issue is related to a lack of protection measures for the web page structure, which can be exploited by a remote attacker to impact the confidentiality and integrity of protected...

PT-2021-4036

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.0 Description The issue is related to the index.php/appointment/todos endpoint in the Chikitsa Patient Management System, which allows for XSS attacks. This is due to the lack of protection measur...

FUDForum 3.1.0 - (author) Reflected XSS Vulnerability

Exploit Title: FUDForum 3.1.0 - 'author' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.1.0.zip/download Version: FUDForum 3.1.0 Tested on: Windows 10 and Kali CVE : CVE-2021-27520...

FUDForum 3.1.0 - (srch) Reflected XSS Vulnerability

Exploit Title: FUDForum 3.1.0 - 'srch' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.1.0.zip/download Version: FUDForum 3.1.0 Tested on: Windows 10 and Kali CVE : CVE-2021-27519 -Descriptio...

FUDForum 3.1.0 Cross Site Scripting

Exploit Title: FUDForum 3.1.0 - 'srch' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.1.0.zip/download Version: FUDForum 3.1.0 Tested on: Windows 10 and Kali CVE : CVE-2021-27519 -Descriptio...