Lucene search
+L

218 matches found

CNVD
CNVD
added 2021/12/14 12:00 a.m.12 views

MaxSite CMS Input Validation Error Vulnerability

MaxSite CMS is a Russian MaxSite CMS open source project a web content management system . An input validation error vulnerability exists in MaxSite CMS, which originates from the product's Documents page not validating input data. The vulnerability can be exploited to execute arbitrary code...

9.8CVSS7.4AI score0.03471EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/10 7:15 p.m.7 views

CVE-2021-27983

Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...

9.8CVSS5.9AI score0.03471EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/10 7:15 p.m.18 views

CVE-2021-27983

Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...

9.8CVSS0.03471EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/10 7:15 p.m.6 views

CVE-2021-27983

Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...

9.8CVSS8.7AI score0.03471EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/10 7:15 p.m.22 views

Remote code execution

Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...

7.5CVSS9.6AI score0.03471EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/12/10 6:14 p.m.56 views

CVE-2021-27983

The CVE-2021-27983 entry concerns MaxSite CMS v107.5 where an input validation error on the Documents page enables Remote Code Execution (RCE). Multiple sources (CVE listings, CNVD, CNNVD, Red Hat advisory) corroborate: the vulnerability stems from insufficient input validation in the Documents p...

9.8CVSS9.6AI score0.03471EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/10 6:14 p.m.30 views

CVE-2021-27983

Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...

9.9AI score0.03471EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/10 12:00 a.m.11 views

MaxSite CMS 输入验证错误漏洞

MaxSite CMS is a Russian MaxSite CMS open source project a web content management system . An input validation error vulnerability exists in MaxSite CMS, which originates from the product's Documents page not validating input data. The vulnerability can be exploited to execute arbitrary code...

9.8CVSS6.1AI score0.03471EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/08/04 12:00 a.m.93 views

MaxSite CMS Cross-Site Scripting Vulnerability

MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...

6.1CVSS4.6AI score0.03436EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/03 12:15 p.m.49 views

CVE-2021-35265

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

6.1CVSS0.03436EPSS
SaveExploits1References2
OSV
OSV
added 2021/08/03 12:15 p.m.13 views

CVE-2021-35265

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

6.1CVSS5.7AI score
SaveExploits0References2
Prion
Prion
added 2021/08/03 12:15 p.m.23 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

4.3CVSS5.9AI score0.03436EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/08/03 11:55 a.m.58 views

CVE-2021-35265

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

6.1AI score0.03436EPSS
SaveExploits1References2
CVE
CVE
added 2021/08/03 11:55 a.m.77 views

CVE-2021-35265

CVE-2021-35265 is a reflected cross-site scripting vulnerability in MaxSite CMS before version V106, exploitable via the path through product/page/ . The issue allows an attacker to inject arbitrary JavaScript into pages viewed by victims, potentially leading to session hijacking, defacement, or ...

6.1CVSS5.9AI score0.03436EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/08/03 12:00 a.m.15 views

MaxSite CMS 跨站脚本漏洞

MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...

6.1CVSS5.8AI score0.03436EPSS
SaveExploits1References3
Huntr
Huntr
added 2021/03/25 4:06 p.m.23 views

Cross-site Scripting (XSS) - Generic in maxsite/cms

✍️ Description Cross-site scripting also known as XSS is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites...

0.6AI score
SaveExploits0
CNVD
CNVD
added 2018/01/30 12:00 a.m.3 views

Cross-site scripting vulnerability in MaxSite CMS version 98

MaxSite CMS is a website management system. A cross-site scripting vulnerability exists in MaxSite CMS version 98. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

6.4AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.41 views

CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability

No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:MAXSITE + Exploit...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2013/06/30 12:00 a.m.25 views

Atomy Maxsite - index.php Arbitrary File Upload

Atomy Maxsite - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...

SaveExploits0
Exploit DB
Exploit DB
added 2013/06/30 12:00 a.m.20 views

Atomy Maxsite - 'index.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and...

5.3AI score
SaveExploits0
Rows per page
Query Builder