259 matches found
CVE-2023-36291
Maxsite CMS v.108.7 is affected by a Cross Site Scripting vulnerability allowing a remote attacker to execute arbitrary code via the f_content parameter in admin/page_new. CVSSv3.1 base score 6.1 (Network attack, user interaction required, impact on confidentiality and integrity). No remediation ...
MaxSite CMS Cross-Site Scripting Vulnerability (CNVD-2022-33826) (CVE-2022-25413)
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.MaxSite CMS 108 has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks via the ftags parameter in /admin/pageedit/3...
Maxsite CMS Cross-Site Scripting Vulnerability (CNVD-2022-33827)
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.Maxsite CMS has a cross-site scripting vulnerability , the vulnerability stems from the lack of parameters in the management file f the user-supplied data and output data validation filter , an attacker...
Maxsite CMS File Upload Vulnerability
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. Maxsite CMS is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via crafted PHP files...
Maxsite CMS arbitrary file deletion vulnerability
MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project . Maxsite CMS has arbitrary file deletion vulnerability , the vulnerability stems from all-files-update-ajax.php in the dir and deletefile parameters for the file name lack of validation , the attacker c...
CVE-2022-25411
A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25412
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...
CVE-2022-25413
Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...
CVE-2022-25412
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...
CVE-2022-25411
A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25413
Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...
Cross site scripting
Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...
Arbitrary file deletion
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...
Cross site scripting
Maxsite CMS v108 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ftags at /admin/pageedit/3...
Remote code execution
A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-25413
Maxsite CMS v108 is affected by a stored cross-site scripting (XSS) vulnerability through the f_tags parameter in /admin/page_edit/3 . The issue is evidenced across multiple sources (NVD, CNVD, Red Hat, OSV, CVE listings) under CVE-2022-25413, confirming the vulnerable component and entry. The pr...
