541 matches found
CVE-2022-3950: Improper Neutralization
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
PublicCMS Remote Code Execution (CVE-2022-23389)
A remote code execution vulnerability exists in PublicCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PublicCMS server-side request forgery vulnerability
PublicCMS is an open source content management system CMS written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
Server side request forgery (ssrf)
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
CVE-2021-27693
PublicCMS is affected by a Server-side Request Forgery (SSRF) in the /publiccms/admin/ueditor endpoint when the action is catchimage, prior to version 4.0.202011.b. The vulnerability allows an attacker to access internal resources; NVD notes a critical CVSS v3.1 score (9.8, HIGHImpact on confiden...
PT-2022-9841 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS versions prior to 4.0.202011.b Description: The issue is related to a Server-side Request Forgery SSRF vulnerability. It affects the /publiccms/admin/ueditor endpoint when the action is catchimage. This allows for potential...
CVE-2021-27693: Server-Side Request Forgery (SSRF)
Server-side Request Forgery SSRF vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage...
PublicCMS 代码问题漏洞
PublicCMS is an open source content management system CMS written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An...
CVE-2022-29784
PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...
CVE-2022-29784
PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...
Information disclosure
PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java...
CVE-2022-29784
CVE-2022-29784 affects PublicCMS versions 4.0.202204.a and earlier. The vulnerability is an information leak via the component /views/directive/sys/SysConfigDataDirective.java, caused by improper handling within that directive. CVSS data in the initial record shows a MEDIUM severity with confiden...