Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the evalImageTypeValue process. An attacker can inject arbitrary attributes, including event handlers, into the backend list by supplying specially crafted values that are rendered in an image column, leading...

PT-2022-18398

Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Lists.php zhuan. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to...

XDCMS \system\modules\form\lists.php SQL注入

No description provided by source...

cscmsV4 /plugins/vod/controllers/lists.php sql注入漏洞

No description provided by source...

PT-2014-2139

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.34.1 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options in the shared/inc/sql/lists.php file...

CVE-2011-3195: Improper Input Validation

shared/inc/sql/lists.php in Domain Technologie Control DTC before 0.34.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in mailing list tunable options...

The latest xdcms_v2. 0. 2 0DAY-vulnerability warning-the black bar safety net

Start. In the comments place lists. php file n"; $fields.="".$ value'name'."：n"; $fields.="".$ input-$value'formtype for'." ".$ value'explain'."n"; $fields.="n"; //Whether to display the CAPTCHA if$form'0''iscode'==1 $fields.="n"; $fields.="CAPTCHA:n"; $fields.="n"; $fields.="n";...