CVE-2020-23046

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component tpl.php via the filename, mid, userid, and templet' parameters...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. A cross-site scripting vulnerability exists in DedeCMS version 7.5 SP2, which can be exploited to inject malicious script code via th...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

Desdev DedeCMS 跨站脚本漏洞

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

CVE-2018-5971

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...

Code Execution Vulnerability in FineCMS Frontend Mid Parameter

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the frontend mid parameter of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...

AnyMacro Mail安宁邮件系统存在SQL注入漏洞

简要描述： 给客户做测评发现的.因为需要登录所以定义为中级别. 详细说明： 这是附件的下载选项.由于对mid参数没有做验证,导致出现SQL注入漏洞 漏洞证明： 这是附件的下载选项.由于对midmailid参数没有做验证,导致出现SQL注入漏洞...

CVE-2010-5007

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

CVE-2008-4376

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-3378

SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2004-2474

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...