277 matches found
CVE-2021-27983: Undefined Security Weakness
Remote Code Execution RCE vulnerability exists in MaxSite CMS v107.5 via the Documents page...
MaxSite CMS Cross-Site Scripting Vulnerability
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
Cross site scripting
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
CVE-2021-35265
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
CVE-2021-35265
CVE-2021-35265 is a reflected cross-site scripting vulnerability in MaxSite CMS before version V106, exploitable via the path through product/page/ . The issue allows an attacker to inject arbitrary JavaScript into pages viewed by victims, potentially leading to session hijacking, defacement, or ...
MaxSite CMS 跨站脚本漏洞
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...
CVE-2021-35265: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...
PT-2021-20869
Name of the Vulnerable Software and Affected Versions: MaxSite CMS versions prior to V106 Description: A reflected cross-site scripting XSS issue allows remote attackers to inject arbitrary web script to a page via the "product/page/" API endpoint. This enables attackers to execute malicious...
Cross-site Scripting (XSS) - Generic in maxsite/cms
✍️ Description Cross-site scripting also known as XSS is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites...
Cross-site scripting vulnerability in MaxSite CMS version 98
MaxSite CMS is a website management system. A cross-site scripting vulnerability exists in MaxSite CMS version 98. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability
No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:MAXSITE + Exploit...
Atomy Maxsite - index.php Arbitrary File Upload
Atomy Maxsite - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...
Atomy Maxsite - 'index.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and...
Уязвимость в MaxSite Anti Spam Image
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в MaxSite Anti Spam Image. Это капча плагин для WordPress. Это переработанная версия оригинального плагина Anti Spam Image, об уязвимости в котором я писал в 2007 году в своём проекте MoBiC. Данная капча...