1905 matches found
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
Design/Logic Flaw
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
Cross site scripting
A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...
CMS Made Simple 跨站脚本漏洞
CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple v2.2.17, whic...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
CVE-2023-36970
A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
CVE-2023-36969
CMS Made Simple v2.2.17 (and affected
CVE-2023-36970
CMS Made Simple 2.2.17 is affected by a Cross-site Scripting (XSS) vulnerability that can be triggered via the File Upload function, allowing an attacker to inject arbitrary web script or HTML. The issue is documented across multiple feeds (CVE-2023-36970) and described as an XSS in CMS Made Simp...
PT-2023-25759 · Unknown · Cms Made Simple
Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the File Upload function. Recommendations: For CMS Made Simple version 2.2.17, update to a version...
PT-2023-25757 · Unknown · Cms Made Simple
Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: The issue allows for Remote Command Execution via the File Upload Function. Recommendations: For CMS Made Simple version 2.2.17, update to a version that fixes this issue...
CVE-2023-36970: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...
CVE-2023-36969: Unrestricted Upload of File with Dangerous Type
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
made-in-algeria.com Cross Site Scripting vulnerability OBB-3478282
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Surveillance camera insecurities argument comes to one inevitable conclusion: Always update
Chinese-made surveillance cameras find themselves in a spot of controversy, after a BBC investigation uncovered flaws in devices during several brand tests. Surveillance and webcam vulnerabilities are common, and weve covered them many times on our blog. Whats interesting with this story is that...
CVE-2023-28496
CVE-2023-28496: A Stored XSS flaw in the SMTP2GO – Email Made Easy WordPress plugin (versions
WordPress plugin SMTP2GO – Email Made Easy 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2023-28496: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SMTP2GO – Email Made Easy plugin = 1.4.2 versions...
