199 matches found
CMS Made Simple SQL Injection Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based permission management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple version...
CVE-2021-40961
CMS Made Simple =2.2.15 is affected by SQL injection in modules/News/function.adminarticlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '...
CSCMS Music Portal System SQL Injection Vulnerability
CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter of /admin.php/news/admin/news/save validation of external input...
NukeViet Cross-site Scripting via the editor in the News module
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
GHSA-6J4J-22QG-9FFM NukeViet Cross-site Scripting via the editor in the News module
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
CVE-2022-27369
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component newsNews.phphy...
PHPCMS SQL Injection Vulnerability (CNVD-2022-43217)
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules for news, images, downloads, information, products, etc. A security vulnerability exists in PHPCMS v1.0, which stems from the category parameter in categorymenu.php. No detailed vulnerabilit...
CVE-2022-24607
Luocms v2.0 is affected by SQL Injection in /admin/news/newsok.php...
CVE-2022-24602
Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...
Luocms SQL Injection Vulnerability
Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/newsmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...
NukeViet News Module SQL Injection
The vulnerability of the addtotopics.php script, part of the built-in News module in the NukeViet content management system, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the...
CVE-2020-22765
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
Cross site scripting
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
NukeViet Cross-Site Scripting Vulnerability
NukeViet is a free open source content management system from Vietnam. NukeViet version 4.4.0 has a cross-site scripting vulnerability that can be exploited by attackers via the editor in the News module to conduct cross-site scripting attacks...
Vinades NukeViet cross-site scripting vulnerability
NukeViet is a free open source content management system from Vietnam. NukeViet version 4.4.0 has a cross-site scripting vulnerability that can be exploited by attackers via the editor in the News module to conduct cross-site scripting attacks...
CVE-2020-22765
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
CVE-2020-22765
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
CVE-2020-22765
NukeViet CMS, version 4.4.0, contains a Cross-Site Scripting (XSS) vulnerability exploitable via the News module editor. The connected documents confirm the affected product and entry point but do not provide root-cause details, exploit status, affected sub-versions beyond 4.4.0, or remediation s...
PT-2021-10787
Name of the Vulnerable Software and Affected Versions NukeViet cms version 4.4.0 Description The issue is a Cross Site Scripting XSS vulnerability. It affects the News module via the editor. Recommendations For version 4.4.0, consider disabling the editor in the News module as a temporary...
