490 matches found
CVE-2018-19331: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
S-CMS Cross-Site Scripting Vulnerability
S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...
CVE-2018-19145
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
Cross site scripting
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
CVE-2018-19145: Improper Neutralization of Input During Web Page Generation
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
CVE-2018-18781: Improper Neutralization of Input During Web Page Generation
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2019-01728)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/uploadsselect.php file in DedeCMS version 5.7 SP2, which can be exploited by a remote attacker with the help of the 'f' or 'keyword' parameter to A remote attacker can use the 'f' ...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-16372
The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
Cross site scripting
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
PT-2018-13525
Name of the Vulnerable Software and Affected Versions PESCMS Team version 2.2.1 Description The issue concerns multiple reflected XSS instances. These occur via the keyword parameter in several API endpoints: "g=Team&m=User&a=index&keyword=", "g=Team&m=User group&a=index&keyword=",...
CVE-2018-16371
CVE-2018-16371 affects PESCMS Team 2.2.1 and involves multiple reflected XSS via the keyword parameter in four endpoints: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=. The provided documents iden...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-16371: Improper Neutralization of Input During Web Page Generation
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-14500
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...