CVE-2018-18927

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

PT-2018-14727

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0 Description An issue in PublicCMS allows cross-site scripting XSS by modifying the page list "attached" attribute. This can be achieved through an SQL statement, such as 'UPDATE sys module SET attached = "XSS" WHERE...

CVE-2018-18927: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the pagelist "attached" attribute which typically has 'class="icon-globe icon-large"' in its value, as demonstrated by an 'UPDATE sysmodule SET attached = "XSS" WHERE id="pagelist"' statement...

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

Design/Logic Flaw

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

CVE-2018-17368

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

CVE-2018-17368

PublicCMS 4.0.180825 contains a username enumeration flaw: invalid login responses differ based on username validity, enabling brute-force attempts. Root cause is response length discrimination. CVSS indicates network access, low complexity, no authentication, partial confidentiality impact; no e...

PT-2018-13996

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.180825 Description An issue in PublicCMS makes it easier to conduct brute-force attacks due to different response lengths for invalid login attempts, depending on whether the username is valid. Recommendations For PublicC...

CVE-2018-17368: Undefined Security Weakness

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks...

PublicCMS Remote Code Execution Vulnerability

PublicCMS is an open source content management system CMS written in Java. A security vulnerability exists in PublicCMS version 4.0.20180210. A remote attacker can exploit this vulnerability by uploading a ZIP archive file containing a .jsp file with a directory traversal pathname to execute...

CVE-2018-12914

A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI...

CVE-2018-12914

A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI...

CVE-2018-12914

A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI...

CVE-2018-12914

CVE-2018-12914 affects PublicCMS V4.0.20180210. The vulnerability allows remote code execution by an attacker who uploads a ZIP archive containing a JSP file with a directory traversal path; after unzip, arbitrary code can be executed when the JSP URI is visited. NVD reports CVSS v3.0 base score ...

PT-2018-11471

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description A remote code execution issue was found, allowing an attacker to upload a ZIP archive containing a .jsp file with a directory traversal pathname. After the unzip operation, the attacker can execute...

CVE-2018-12914: Unrestricted Upload of File with Dangerous Type

A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI...

PublicCMS Path Traversal Vulnerability

PublicCMS is an open source content management system CMS written in Java. A directory traversal vulnerability exists in PublicCMS version 4.0.20180210. An attacker can read arbitrary files with the help of admin/cmsWebFile/list.html?path=... / URL to read arbitrary files...

PublicCMS path traversal vulnerability (CNVD-2018-16529)

PublicCMS is an open source content management system CMS written in Java. A directory traversal vulnerability exists in PublicCMS version 4.0.20180210. An attacker can read arbitrary files with the help of admin/cmsTemplate/content.html?path=... / URL to read arbitrary files...

Directory traversal

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...