razorCMS HTML Injection Vulnerability (CNVD-2019-00806)

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. An injection vulnerability exists in razorCMS version 3.4.8. An attacker can use the 'keywords' parameter of the //page page to inject arbitrary HTM...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

Cross site scripting

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

PT-2018-15155 · Razorcms · Razorcms

Name of the Vulnerable Software and Affected Versions: razorCMS version 3.4.8 Description: The issue is related to HTML injection in the software. It can be exploited via the "//page" API endpoint, specifically through the keywords parameter. Recommendations: For razorCMS version 3.4.8, consider...

CVE-2018-19905: Improper Neutralization of Input During Web Page Generation

HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...

CVE-2018-20572: Improper Neutralization of Special Elements used in an SQL Command

WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...

PT-2018-15442

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue allows SQL injection via the keywords parameter in the "index.php?m=promote&f=index&v=search" endpoint. Recommendations For WUZHI CMS version 4.1.0, avoid using the keywords parameter in the affect...

CVE-2018-15679

An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...

CVE-2018-15679: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...

CVE-2018-15893: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords parameter...

WUZHI CMS SQL Injection Vulnerability (CNVD-2018-18141)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the /coreframe/app/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability by...

WUZHI CMS SQL Injection Vulnerability (CNVD-2018-14091)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject malicious SQL statements by sending the 'keywords' parameter to the...

WUZHI CMS SQL Injection Vulnerability (CNVD-2018-15403)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system. WUZHI CMS 4.1.0 version of the coreframe/app/order/admin/goods.php file there is a SQL injection vulnerability, the vulnerability stems from the program does not filte...

CVE-2018-14472: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08556)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

iCMS Cross-Site Scripting Vulnerability (CNVD-2018-08925)

iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site scripting vulnerability exists in iCMS version 7.0.8. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'keywords' parameter...

CVE-2018-10250

iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixincategory action, aka a WeChat Classified Management keyword search...

PSNews Website 1.0.0 - Keywords SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PSNews Website Same Backend with Mobile Apps 1.0.0 - 'Keywords' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...