171 matches found
Vinades NukeViet 安全漏洞
Vinades NukeViet is an open source Content Management System CMS from Vinades Vietnam. A security vulnerability exists in Vinades NukeViet CMS, which originates from an affected filterAttr function in the vendor/vinades/nukeviet/Core/Request.php file of the Data URL Handler component, where...
PT-2022-24992 · Unknown · Nukeviet Cms
Name of the Vulnerable Software and Affected Versions: NukeViet CMS versions prior to 4.5 Description: A vulnerability has been found in the function filterAttr of the file vendor/vinades/nukeviet/Core/Request.php of the component Data URL Handler. The manipulation of the argument attrSubSet lead...
CVE-2022-3975 NukeViet CMS Data URL Request.php filterAttr cross site scripting
A vulnerability, which was classified as problematic, has been found in NukeViet CMS. Affected by this issue is the function filterAttr of the file vendor/vinades/nukeviet/Core/Request.php of the component Data URL Handler. The manipulation of the argument attrSubSet leads to cross site scripting...
Cross-site Scripting (XSS)
nukeviet/nukeviet is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the $preTag parameter in filterTags of Request.php...
Cross-site Scripting in NukeViet CMS
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
GHSA-PM37-5J5M-6CVW Cross-site Scripting in NukeViet CMS
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
CVE-2022-30874
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
CVE-2022-30874
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
Cross site scripting
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
CVE-2022-30874
CVE-2022-30874 affects NukeViet CMS prior to 4.5.02 with a Stored Cross-Site Scripting (XSS) vulnerability. The issue is described across multiple sources as an XSS in NukeViet, but the provided documents do not include concrete exploit details, affected files/functions beyond the general vulnera...
CVE-2022-30874
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
CVE-2022-30874
There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...
PT-2022-20361 · Unknown · Nukeviet Cms
Name of the Vulnerable Software and Affected Versions: NukeViet CMS versions prior to 4.5.02 Description: The issue is related to a Cross Site Scripting Stored XSS vulnerability. This means that an attacker can inject malicious scripts into the website, which can then be executed by other users. ...
Vinades NukeViet 跨站脚本漏洞
Vinades NukeViet is an open source Content Management System CMS from Vinades Vietnam. A cross-site scripting vulnerability exists in Vinades NukeViet CMS versions prior to 4.5.02. There is no information about this vulnerability at this time, so please stay tuned to CNNVD or vendor announcements...
NukeViet SQL Injection vulnerability via topicsid parameter
SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via the topicsid parameter in modules/news/admin/addtotopics.php...
GHSA-6J4J-22QG-9FFM NukeViet Cross-site Scripting via the editor in the News module
Cross Site Scripting XSS vulnerability in NukeViet cms 4.4.0 via the editor in the News module...
NukeViet SQL Injection vulnerability
SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the 1 listid parameter in detail.php and the 2 groupprice or groupid parameters in searchresult.php. Fix Implementation: Download the update package corresponding to the NukeViet version you are using, extract and upload ...
GHSA-M8JX-MXF9-2RPW NukeViet SQL Injection vulnerability
SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the 1 listid parameter in detail.php and the 2 groupprice or groupid parameters in searchresult.php. Fix Implementation: Download the update package corresponding to the NukeViet version you are using, extract and upload ...