13496 matches found
PT-2019-15249
Name of the Vulnerable Software and Affected Versions MetInfo version 7.0.0beta Description The issue allows for a CSRF attack, enabling an attacker to add a user account. This is achieved by sending a doSaveSetup action to the admin/index.php endpoint, for example, via an...
CVE-2019-17676: Cross-Site Request Forgery (CSRF)
app/system/admin/admin/index.class.php in MetInfo 7.0.0beta allows a CSRF attack to add a user account via a doSaveSetup action to admin/index.php, as demonstrated by an admin/?n=admin&c=index&a=doSaveSetup URI...
CVE-2019-17607
HongCMS 3.0.0 has XSS via the install/index.php servername parameter...
CVE-2019-17610
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...
CVE-2019-17611
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php servername parameter...
Design/Logic Flaw
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...
CVE-2019-17609
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...
CVE-2019-17609
CVE-2019-17609 : HongCMS 3.0.0 exposes a cross-site scripting vulnerability via the install/index.php dbusername parameter. The issue is described across multiple sources (NVD/CNVD) as allowing client-side code execution in the context of an affected user. CVSSv3.1 base score is 6.1 (MEDIUM) with...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
CVE-2019-17608
Affected software: HongCMS 3.0.0. Vulnerability: Cross-Site Scripting via the install/index.php dbname parameter. Vector/Root cause: unsanitized/input handling leads to client-side script execution. Impact: attacker can execute client-side code. References: NVD entry describes XSS via the dbname ...
CVE-2019-17607
HongCMS 3.0.0 has XSS via the install/index.php servername parameter...
PT-2019-15229
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices is not provided. Technical details about exploitation include the...
PT-2019-15231
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to the lack of proper input validation in the tableprefix parameter of the install/index.php file...
PT-2019-15227
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue is related to a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the servername parameter in the install/index.php endpoint...
PT-2019-15228
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the dbname parameter in the "install/index.php" endpoint. Recommendations For HongCMS...