291 matches found
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
Design/Logic Flaw
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
PT-2019-13906
Name of the Vulnerable Software and Affected Versions iCMS version 7.0.15 Description The issue allows for XSS via the keywords parameter in the "admincp.php?app=apps" endpoint. Recommendations For iCMS version 7.0.15, avoid using the keywords parameter in the "admincp.php?app=apps" endpoint unti...
CVE-2019-14976: Improper Neutralization of Input During Web Page Generation
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-8390
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2019-8390: Improper Neutralization of Input During Web Page Generation
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2018-17420
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
PT-2019-9472
Name of the Vulnerable Software and Affected Versions ZrLog version 2.0.3 Description A SQL injection issue was found in the article management search box. The keywords parameter is vulnerable to this issue. Recommendations For ZrLog version 2.0.3, avoid using the keywords parameter in the articl...
CVE-2018-17420: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
PT-2019-19017
Name of the Vulnerable Software and Affected Versions Maccms version 8.0 Description The issue allows for XSS via the t key parameter in the inc/config/cache.php file. This is because the template/paody/html/vod type.html file mishandles the keywords parameter, and the a/tpl/module/db.php file on...
razorCMS HTML Injection Vulnerability (CNVD-2019-00806)
razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. An injection vulnerability exists in razorCMS version 3.4.8. An attacker can use the 'keywords' parameter of the //page page to inject arbitrary HTM...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
Cross site scripting
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
PT-2018-15155 · Razorcms · Razorcms
Name of the Vulnerable Software and Affected Versions: razorCMS version 3.4.8 Description: The issue is related to HTML injection in the software. It can be exploited via the "//page" API endpoint, specifically through the keywords parameter. Recommendations: For razorCMS version 3.4.8, consider...
CVE-2018-19905: Improper Neutralization of Input During Web Page Generation
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-20572: Improper Neutralization of Special Elements used in an SQL Command
WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893...