CVE-2019-8438: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting-site setting" of admin/index.php, aka sitename...

CVE-2019-8439: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting-site setting" of admin/index.php, aka sitedomain...

CVE-2018-17425: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI...

CVE-2019-8437: Cross-Site Request Forgery (CSRF)

njiandan-cms through 2013-05-23 has index.php/admin/usernew CSRF to add an administrator...

CVE-2019-9626: Improper Neutralization of Special Elements used in an SQL Command

PHPSHE 1.7 allows module/index/cart.php pintuanid SQL Injection to index.php...

CVE-2013-7467: Improper Neutralization of Input During Web Page Generation

Simple Machines Forum SMF 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter...

PT-2019-9477

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue is related to stored XSS, which can be triggered via the Extension module and specifically the SMS in station field. This field is accessible under the index.php?m=core URI, which is an API endpoin...

PT-2019-19449

Name of the Vulnerable Software and Affected Versions baigo CMS version 2.1.1 Description A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the optbaseBG SITE NAME parameter to the "bg console/index.php?m=opt&c=request" URI. Recommendations For baigo CMS...

CVE-2019-9226: Improper Neutralization of Input During Web Page Generation

An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the optbaseBGSITENAME parameter to the bgconsole/index.php?m=opt&c=request URI...

Cross site scripting

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...

CVE-2019-9110

XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&setiframe=XSS to coreframe/app/content/postinfo.php...

PT-2019-19363

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A security issue exists where an XSS attack can be performed. The issue is related to the "index.php?m=message&f=message&v=add" endpoint, specifically with the username variable. Recommendations For WUZHI CM...

CVE-2019-9107: Improper Neutralization of Input During Web Page Generation

XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=XSS to coreframe/app/attachment/imagecut.php...

PT-2019-19364

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A security issue exists where an XSS attack can be performed. The issue is related to the "index.php?m=content&f=postinfo&v=listing&set iframe=" API endpoint, which is connected to the...

PT-2019-19362

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue exists due to a cross-site scripting XSS flaw. This flaw can be exploited via the index.php endpoint, specifically through the m, f, v, x, and y parameters. The vulnerable endpoint is...

CVE-2019-9110: Improper Neutralization of Input During Web Page Generation

XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&setiframe=XSS to coreframe/app/content/postinfo.php...

CVE-2019-9109: Improper Neutralization of Input During Web Page Generation

XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=XSS to coreframe/app/message/message.php...

PT-2019-19361

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A security issue exists where an XSS attack can be performed. The issue is related to the "index.php?m=attachment&f=imagecut&v=init&imgurl=" endpoint, which is connected to the...

CVE-2019-9108: Improper Neutralization of Input During Web Page Generation

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=XSS&y=XSS to coreframe/app/core/map.php...

PT-2019-7049

Name of the Vulnerable Software and Affected Versions Vembu StoreGrid version 4.4.x Description The issue concerns the server web interface of Vembu StoreGrid, where the front page leaks the private IP address. This leak occurs due to incorrect processing of an index.php trailing slash, which...