189 matches found
CVE-2019-9053-exploit
CVE-2019-9053 — CMS Made Simple의 인증되지 않은 SQL 인젝션 설명 CVE-2019-9053 은 CMS Made Simple ≤ 2.2.9 버전에 영향을 주는 시간 기반 블라인드Time-based Blind SQL 인젝션 취약점입니다. 인증이 필요하지 않습니다. 취약한 매개변수는 News 모듈moduleinterface.php의 m1idlist입니다. 공격자는 이를 악용하여 관리자 비밀번호 해시, 사용자 이름, 이메일 및 해시에 사용된 salt를 추출할 수 있습니다. 비밀번호 저장 방식은 MD5salt...
CVE-2019-9053-port-py3
CVE-2019-9053 익스플로잇 - Python 3 이것은 CMS Made SimpleCMSMS 2.2.10 이전 버전을 대상으로 하는 CVE-2019-9053 익스플로잇의 Python 3 포트입니다. 이 취약점은 뉴스 모듈 인터페이스를 통한 SQL 인젝션을 허용합니다. 예제 출력 TryHackMe Simple CTF Challenge에서 테스트되었습니다. 설명 이 익스플로잇은 CMS Made Simple 뉴스 모듈의 SQL 인젝션 취약점을 이용합니다. 수행할 수 있는 작업은 다음과 같습니다: CMS 솔트 추출 관리자 사용...
GHSA-465G-4Q99-5X86 NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
Summary Two filter-bypass techniques in NukeViet\Core\Request::filterAttr and NukeViet\Core\Request::unhtmlentities allow a low-privileged user any account with news post permission to store and serve arbitrary JavaScript to any visitor of the affected page. Affected Component...
CVE-2026-9591 Cross-Site Request Forgery (CSRF) in SimplCommerce News Module
Cross-site request forgery CSRF in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attacker to create or modify news items as an administrator via a crafted form submitted to /api/news-items, due to missing anti-CSRF protection...
CVE-2026-9591 Cross-Site Request Forgery (CSRF) in SimplCommerce News Module
Cross-site request forgery CSRF in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attacker to create or modify news items as an administrator via a crafted form submitted to /api/news-items, due to missing anti-CSRF protection...
CVE-2026-11975 Stored Cross-Site Scripting (XSS) in SimplCommerce News Module Admin Interface
Stored cross-site scripting XSS in NewsItemApiController In SimplCommerce prior to commit 6142d3b5 allows an authenticated administrator to execute arbitrary JavaScript via the ShortContent and FullContent fields, which are stored without HTML sanitization and rendered unencoded via @Html.Raw...
CVE-2026-11975
CVE-2026-11975 : In SimplCommerce, stored XSS occurs in the NewsItemApiController before commit 6142d3b5, allowing an authenticated administrator to inject JavaScript via ShortContent and FullContent that are stored without HTML sanitization and rendered with Html.Raw(). Affected: News module adm...
CVE-2022-50966
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests...
EUVD-2013-3459
Malware in sbrugna...
EUVD-2008-2085
Malware in sbrugna...
EUVD-2005-4258
Malware in sbrugna...
EUVD-2014-2284
Malware in sbrugna...
EUVD-2005-4257
Malware in sbrugna...
EUVD-2005-0675
Malware in sbrugna...
EUVD-2012-4817
Malware in sbrugna...
EUVD-2010-4628
Malware in sbrugna...
EUVD-2008-4337
Malware in sbrugna...
EUVD-2012-1322
Malware in sbrugna...