CVE-2023-43878-RiteCMS-Stored-XSS---MainMenu

Rite CMS v3.0 複数の格納型XSS 著者: Sergio 説明: Rite CMS 3.0は、複数の格納型クロスサイトスクリプティング XSS の脆弱性の影響を受けます。攻撃者は、管理メニューの「メインメニュー - アイテム」に細工したペイロードを挿入することで、任意のコードを実行できます。 攻撃ベクトル: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC: パネルにログインした後、「管理 - メニュー - メインメニュー」セクションに移動します。...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 複数の格納型XSS 作成者: Sergio 説明: Rite CMS 3.0は、管理メニューのホームページフィールドに細工されたペイロードを介して攻撃者が任意のコードを実行できるようにする、複数の格納型クロスサイトスクリプティング（XSS）の脆弱性の影響を受けます。ペイロードはユーザーのセッションとは無関係にメインページで実行されるため、別のユーザーでホームページにアクセスした場合もペイロードが実行されます。 攻撃ベクトル: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC: パネルにログインしたら、「Administration...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 の複数の格納型XSS 作成者: Sergio 説明: Rite CMS 3.0 は、攻撃者が管理メニューの「Global Content Blocks」に細工したペイロードを注入することで任意のコードを実行できる、格納型クロスサイトスクリプティング（XSS）脆弱性の影響を受けます。 攻撃ベクトル: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L POC: パネルにログインしたら、「Administration - Global Content Blocks - Home」に移動します。 bodyの設定を編集し、XSSペイロードを追加しま...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

CVE-2025-67174

A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...

EUVD-2023-48239

Malicious code in bioql PyPI...

EUVD-2023-48240

Malicious code in bioql PyPI...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

RiteCMS 跨站脚本漏洞

RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

Cross site scripting

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877

CVE-2023-43877 concerns Rite CMS 3.0, where multiple Cross-Site Scripting (XSS) vulnerabilities allow an attacker to execute arbitrary code by crafting payloads in the Home Page field of the Administration menu (also referenced for related CVE-2023-43878). The Red Hat entry notes a similar issue ...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43877: Improper Neutralization of Input During Web Page Generation

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...