CVE-2018-10096: Improper Neutralization of Input During Web Page Generation

joyplus-cms 1.6.0 has XSS via the devicename parameter in a manager/adminajax.php?action=save flag=add request...

joyplus-cms cross-site scripting vulnerability (CNVD-2018-08675)

joyplus-cms is an efficient video movie website management system built with PHPmysql. A cross-site scripting vulnerability exists in manager/adminvod.php in joyplus-cms 1.6.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the keyword parameter...

PT-2018-9677

Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0 Description: The issue concerns a Cross-Site Scripting XSS problem. It is exploited through the device name parameter in a "manager/admin ajax.php?action=save flag=add" request, specifically the "/manager/admin...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

Design/Logic Flaw

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

The CVE-2018-10073 entry applies to joyplus-cms 1.6.0, where a cross-site scripting vulnerability exists in manager/admin_vod.php via the keyword parameter. Root cause is improper handling of the keyword input leading to XSS. Documents state the affected software and vulnerable parameter but do n...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

PT-2018-9658

Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the keyword parameter of the manager/admin vod.php file...

CVE-2018-10073: Improper Neutralization of Input During Web Page Generation

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

Joyplus CMS Information Disclosure Vulnerability

Joyplus CMS is an efficient video movie website management system built with PHPmysql, independently developed by Zhi Jing Technology, which has been used as a backend management system for free products Joyplus Video, and after continuous improvement, it now has a complete functional system and...

CVE-2018-10028

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

Information disclosure

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

CVE-2018-10028

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

CVE-2018-10028

Affected software: Joyplus CMS 1.6.0. Vulnerability: Information disclosure via direct requests to the install/ or log/ URIs, enabling remote attackers to obtain sensitive information. Root cause / notes: Documented across multiple sources (NVD, Red Hat, CNVD) with identical description; no expli...

CVE-2018-10028

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

PT-2018-9633

Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0 Description: The issue allows remote attackers to obtain sensitive information via a direct request to the 'install/' or 'log/' URI. Recommendations: For joyplus-cms version 1.6.0, restrict access to the 'install/' a...

CVE-2018-10028: Exposure of Sensitive Information to an Unauthorized Actor

joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI...

joyplus-cms cross-site scripting vulnerability

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...