12836 matches found
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-20163)
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which can be exploited by attackers via the configuration panel...
Easy Social Icons < 3.1.4 - Admin+ SQL Injection
The plugin does not sanitize the selectedicons attribute to the cnsswidget before using it in an SQL statement, leading to a SQL injection vulnerability. PoC Author : Qerogram import requests from bs4 import BeautifulSoup BASEURL = "http://localhost:8000" id = "wordpress" pw = "wordpress" def...
Plezi < 1.0.3 - Unauthenticated Stored XSS
The plugin has a REST endpoint allowing unauthenticated users to update the plzconfigurationtrackerenable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue PoC curl -X POST...
Cross-site Scripting in intelliants/subrion
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...
CVE-2020-18325
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...
CVE-2020-18325
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...
Cross site scripting
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...
CVE-2020-18325
Subrion CMS 4.2.1 is affected by a cross-site scripting (XSS) vulnerability in the Configuration panel. The CVE description indicates multiple XSS cases exist in this area; the root cause details are not provided in the documents. Impact is described as XSS, but explicit exploit vectors, affected...
CVE-2020-18325
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel...
Hestiacp Cross-Site Scripting Vulnerability (CNVD-2022-23468)
Hestiacp is a lightweight and powerful control panel for modern networks. hestiacp is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause client-side code execution...
Hestiacp Cross-Site Scripting Vulnerability
Hestiacp is an open source Linux web server control panel designed to provide administrators with an easy-to-use web and command line interface. Hestiacp suffers from a cross-site scripting vulnerability that originates from an unprocessed user-controlled GET domain parameter in index.php, which...
Home Owners Collection Management System信任管理问题漏洞
Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...
Subrion CMS 跨站脚本漏洞
Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which can be exploited by attackers via the configuration panel...
CVE-2022-25045
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-25045
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...
CVE-2022-25045
CVE-2022-25045 concerns Home Owners Collection Management System v1.0, where hardcoded credentials are reported to allow attackers to escalate privileges and access the admin panel. The linked sources across CVE registries (NVD, RH/Red Hat, CNVD, CNVD equivalents, CVE lists) corroborate that the ...
Stored Cross-site Scripting (XSS)
andreapollastri/cipi is vulnerable to stored cross-site scripting. The vulnerability exists in /api/servers name field when adding a new server on the server panel, as it doesn't properly filter the parameters which allows an attacker to inject and execute arbitrary javascript...
Hospital Management System Cross-Site Scripting Vulnerability (CNVD-2022-67482)
Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of...
Home Owners Collection Management System 信任管理问题漏洞
Home Owners Collection Management System, a homeowner collection management system, is vulnerable to a trust management issue stemming from Home Owners Collection Management System v1.0. System v1.0 was found to contain hard-coded credentials, which could be exploited by an attacker to escalate...