12863 matches found
CVE-2020-29247
WonderCMS 3.1.3 is affected by a cross-site scripting (XSS) vulnerability in the Admin Panel. The issue allows an attacker to inject an XSS payload via Page keywords, which triggers for each user visit and can enable cookie theft. The vulnerability is documented across multiple sources (NVD, Red ...
WonderCMS 跨站脚本漏洞
WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Admin Panel" of WonderCMS 3.1.3. The vulnerability can be exploited to steal cookies via page keywords...
Egavilan Media EGM Address Book SQL注入漏洞
Egavilan Media EGM Address Book is a platform for managing contact information address book organized by Egavilan Media in the United States. A SQL injection vulnerability exists in EGavilan Media EGM Address Book version 1.0, which can be exploited by an attacker to gain access to the admin pane...
CVE-2020-35252
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
CVE-2020-35252
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
Cross site scripting
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
CVE-2020-35252
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...
CVE-2020-35252
The CVE-2020-35252 entry describes a Cross-Site Scripting (XSS) vulnerability in the Full Name parameter of the User Registration & Login System with Admin Panel 1.0. Connected sources indicate the root cause as insufficient input validation/filtering for the Full Name field, enabling script exec...
Egavilanmedia User Registration & Login System 跨站脚本漏洞
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability stems from the full name paramet...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
Cross site scripting
DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...
CVE-2020-35274
DotCMS Add Template with admin panel 20.11 is affected by stored XSS that could let an attacker gain remote privileges and potentially steal cookies. The vulnerability is described as stored XSS in the admin template functionality, enabling a compromise of a website or web application through XSS...
Egavilanmedia User Registration & Login System 跨站请求伪造漏洞
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...
DotCMS Add Template with admin panel Cross-site Scripting Vulnerability
Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports modules such as RSS feeds, blogs, and forums, and is easy to extend and build. DotCMS Add Template with admin panel 20.11 suffers from a cross-site scripting vulnerability that allows...
XSS vulnerability in Pi's Windows web panel
Xiaopi Windows web panel is the phpStudy official website released by the server environment to build the operating panel, generally referred to as Xiaopi panel. Xiaopi Windows web panel suffers from an XSS vulnerability. An attacker can exploit the vulnerability to obtain an administrator cookie...
S-cart Cross-Site Scripting Vulnerability
S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...
Authentication Bypass Vulnerability in Pi Windows web panel login
Xiaopi Windows web panel is the phpStudy official website released the server environment to build the operating panel, generally referred to as Xiaopi panel. An authentication bypass vulnerability exists in the Xiaopi Windows web panel login. An attacker can exploit the vulnerability to cause a...
Academy-LMS 4.3 - Stored XSS
Exploit Title: Academy-LMS 4.3 - Stored XSS Date: 19/12/2020 Vendor page: https://academy-lms.com/ Version: 4.3 Tested on Win10 and Google Chrome Exploit Author: Vinicius Alves XSS Payload: 1 Access LMS and log in to admin panel 2 Access courses page 3 Open course manager and SEO menu 4 Paste the...
CVE-2020-12522 Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...