PT-2018-13992

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to index.php because $ SERVER'PHP SELF' is mishandled. This can be exploited by sending a malicious request to the...

CVE-2018-17322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

PT-2018-13983

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the area parameter in the "index.php/index/category/index" API endpoint...

CVE-2018-17003

In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveylstitle parameter to /index.php?r=admin/survey/sa/insert...

PT-2018-13823

Name of the Vulnerable Software and Affected Versions LimeSurvey version 3.14.7 Description A security issue has been found in LimeSurvey, where HTML Injection and Stored XSS can be executed via the surveyls title parameter to the "/index.php?r=admin/survey/sa/insert" API endpoint. Recommendation...

CVE-2018-16820

admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests...

CVE-2018-16819

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...

CVE-2018-16820

Monstra CMS 3.0.4 is affected by a directory-traversal in admin/index.php, exploitable via id=filesmanager&path=uploads/… requests to list arbitrary directories. Root cause is improper handling of the path parameter that enables traversal. Impact per NVD: High (CVSSv3 7.5) for confidentiality los...

CVE-2018-16820: Improper Limitation of a Pathname to a Restricted Directory

admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests...

CVE-2018-16819: Improper Limitation of a Pathname to a Restricted Directory

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...

PT-2018-13761

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue allows for arbitrary directory listing. This can be achieved by sending a request to the "admin/index.php" endpoint with specific parameters, such as id=filesmanager and...

PT-2018-13760

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns arbitrary file deletion in Monstra CMS. An attacker can exploit this by sending a request to the "admin/index.php" endpoint with specific parameters, including id, path, and delete file...

CVE-2018-17036

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

CVE-2018-17034

UCMS 1.4.6 has XSS via the install/index.php mysqldbname parameter...

CVE-2018-17035

The vulnerability CVE-2018-17035 affects UCMS 1.4.6, where an SQL injection can occur during installation via the install/index.php mysql_dbname parameter. Affected component is UCMS (PHP-based CMS); root cause is unsafely handled mysql_dbname input during setup, enabling potential SQL command ex...

CVE-2018-17034

UCMS 1.4.6 contains a Cross-Site Scripting (XSS) vulnerability controllable via the mysql_dbname parameter in install/index.php. Multiple connected sources (NVD entry CVE-2018-17034 and CNVD/CVE listings) confirm an XSS flaw capable of injecting arbitrary scripts/HTML in affected users’ browsers....

CVE-2018-17034: Improper Neutralization of Input During Web Page Generation

UCMS 1.4.6 has XSS via the install/index.php mysqldbname parameter...

CVE-2018-17036: Improper Control of Generation of Code

An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo call into /inc/config.php...

CVE-2018-17035: Improper Neutralization of Special Elements used in an SQL Command

UCMS 1.4.6 has SQL injection during installation via the install/index.php mysqldbname parameter...

PT-2018-13852

Name of the Vulnerable Software and Affected Versions UCMS versions 1.4.6 through 1.6 Description An issue allows PHP code injection during installation via the systemdomain parameter to "install/index.php", as demonstrated by injecting a phpinfo call into /inc/config.php. Recommendations For UCM...