40 matches found
CVE-2022-34013
CVE-2022-34013 affects OneBlog v2.3.4, where a Server-Side Request Forgery (SSRF) vulnerability exists via the Logo parameter in the Link module. The issue stems from insufficient validation of user input in this parameter, enabling an attacker to trigger SSRF against internal resources. Publicly...
OneBlog 代码问题漏洞
OneBlog is a beautiful and powerful Java blog. OneBlog v2.3.4 version exists server-side request forgery vulnerability, the vulnerability stems from the Link module under the Logo parameter fails to correctly validate the user input, an attacker can use the vulnerability to probe the server...
GHSA-RJC2-X53R-6C9R RCE in baserCMS before 4.1.4
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...
Joomla! cross-site scripting vulnerability (CNVD-2021-30598)
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...
CVE-2021-26030
An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page...
PT-2021-16923 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.25 Description: An issue was discovered that allows XSS attacks due to inadequate escaping. This is possible using the logo parameter of the default templates on the error page. Recommendations: For Joomla!...
Open Source Matters Joomla 跨站脚本漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...
Joomla! < 3.9.12 XSS Vulnerability
Joomla! is prone to a cross-site scripting vulnerability due to inadequate escaping, which makes attacks using the logo parameter of the default templates possible. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Cross site scripting
In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...
[20190901] - Core - XSS in logo parameter of default templates
Inadequate escaping allowed XSS attacks using the logo parameter of the default templates...
CVE-2018-18942
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...
Code injection
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...
CVE-2018-18752
Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/WsSaveToModel.php logo parameter...
Webiness Inventory Arbitrary File Upload Vulnerability
Webiness Inventory is a set of PHP language development , Web-based inventory management system . A security vulnerability exists in the protected/library/ajax/WsSaveToModel.php file in Webiness Inventory version 2.3. A remote attacker can exploit this vulnerability to upload arbitrary files with...
Sql injection
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flinkadd.php...
CVE-2017-17730
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flinkadd.php...
CVE-2017-17730
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flinkadd.php...
Desdev DedeCMS SQL Injection Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...
