PT-2021-22999

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0 Description An issue in the BAT file parameters allows attackers to execute arbitrary code. Recommendations For PublicCMS version 4.0, at the moment, there is no information about a newer version that contains a fix for...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java from PublicCMS, China. publicCMS v4.0 contains a security vulnerability that stems from a problem in the BAT file parameters. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-40881: Undefined Security Weakness

An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code...

PublicCMS suffers from a command execution vulnerability (CNVD-2021-70754)

PublicCMS is an open source JAVACMS system developed using the latest mainstream technology in 2021. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

Cross site scripting

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

CVE-2020-21333

PublicCMS 4.0 is affected by a Cross Site Scripting (XSS) vulnerability that can allow an attacker to obtain an administrator cookie when an administrator reviews a submitted case. The issue is documented across multiple sources (NVD, RH, CVE listing, CNNVD, etc.) with the root cause described as...

PublicCMS 跨站脚本漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A cross-site scripting vulnerability exists in PublicCMS. An attacker can exploit this vulnerability to obtain an administrator cookie when an administrator reviews a submission...

PT-2021-10611

Name of the Vulnerable Software and Affected Versions: PublicCMS versions 4.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability can be exploited to obtain an admin cookie when the Administrator reviews a submitted case. Recommendations: For PublicCM...

CVE-2020-21333: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case...

Command Execution Vulnerability in PublicCMS

PublicCMS is an open source content management system CMS written in Java. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927

CVE-2018-18927 concerns PublicCMS V4.0 where an XSS vulnerability exists in the page_list attachment attribute. The issue arises when the value of the page_list "attached" field (often containing class="icon-globe icon-large") can be manipulated to inject script, as demonstrated by the statement:...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

Design/Logic Flaw

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...