446 matches found
PublicCMS SQL注入漏洞
PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS v.4.0. An attacker exploits the vulnerability to execute arbitrary code via the sql parameter of SysSiteAdminControl...
CVE-2020-20915
PublicCMS v4.0 is affected by an SQL injection in the SysSiteAdminControl via the sql parameter, which can lead to remote arbitrary code execution. The vulnerability is confirmed across multiple sources (NVD/Red Hat/CNNVD/etc.) with a high impact. Public details indicate that upgrading to a versi...
CVE-2020-20914
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter...
PublicCMS SQL注入漏洞
PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS version v.4.0. An attacker exploited the vulnerability to execute arbitrary code via sql parameters...
PT-2023-11567 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0 Description: A SQL Injection issue allows a remote attacker to execute arbitrary code via the sql parameter of the SysSiteAdminControl. Recommendations: For PublicCMS version 4.0, update to a version that includes a fix...
CVE-2020-20914
CVE-2020-20914 affects San Luan PublicCMS v4.0. The issue is a SQL Injection via the sql parameter that can lead to remote code execution. Documents show a high-impact, CRITICAL vulnerability (CVSS 3.1: 9.8) with network attack vector and no user interaction required. Exploitation details or live...
CVE-2022-3950
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
Cross site scripting
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2022-3950
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2022-3950
Sanluan PublicCMS contains a cross-site scripting vulnerability in the Tab Handler’s dwz.min.js, specifically the initLink function. The issue can be triggered remotely via manipulation of initLink and is described as a remote exploit. The patched version is identified by the patch name a972dc9b1...
PublicCMS 跨站脚本漏洞
PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS, which originates in an unknown section of the file dwz.min.js in the Tab Handler component, and can be exploited by an attacker to cause cross-site scripting...
PT-2022-24975 · Unknown · Sanluan Publiccms
Name of the Vulnerable Software and Affected Versions: sanluan PublicCMS affected versions not specified Description: A vulnerability was found in sanluan PublicCMS, affecting the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross-site scripting...
CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
PublicCMS Remote Code Execution (CVE-2022-23389)
A remote code execution vulnerability exists in PublicCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PublicCMS server-side request forgery vulnerability
PublicCMS is an open source content management system CMS written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...