177 matches found
RiteCMS 3.0.0 - Cross-site Scripting
RiteCMS v3.0.0 contains a reflected XSS caused by unsanitized input in the mainmenu/editsection component, letting attackers execute arbitrary scripts in the context of the victim's browser. id: CVE-2024-28623 info: name: RiteCMS 3.0.0 - Cross-site Scripting author: 0xAkoko severity: medium...
ritecms
🛡️ CVE-2024-28623 – RiteCMS v3.0.0 における XSS 脆弱性 🔍 概要 このリポジトリは、RiteCMS v3.0.0 で発見されたクロスサイトスクリプティング XSS 脆弱性を文書化したものです。この脆弱性は私が報告し、CVE ID CVE-2024-28623 が割り当てられました。 📄 脆弱性の詳細 CVE ID : CVE-2024-28623 製品 : RiteCMS 影響を受けるバージョン : v3.0.0 脆弱性の種類 : 反射型クロスサイトスクリプティング XSS 影響を受けるコンポーネント : mainmenu/editsection...
CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager
RiteCMS 3.0 ファイルアップロード - XSS Author: Sergio 説明: RiteCMS 3.0 のファイルアップロードの脆弱性により、ローカル攻撃者がXSSコンテンツを含むSVGファイルをアップロードできます。 攻撃ベクトル: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L PoC: 以下の内容を含むSVGファイルを作成します。 パネルにログインすると、管理メニューの「Filemanager」セクションに移動し、「Upload file」をクリックします。 ここでは、SVGファイルが正しくアップロードされていることがわかります。...
RiteCMS 3.1.0 - Authenticated Remote Code Execution
Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution Date: 2025-10-26 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/handylulu/RiteCMS Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: 3.1.0 Tested on: Window...
RiteCMS Cross-Site Scripting Vulnerability
RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web...
RiteCMS Cross-Site Request Forgery Vulnerability
RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a cross-site request forgery vulnerability, the vulnerability stems from the page creation and editing functions do not adequately verify whether the request comes from a trusted user, an attacker can use thi...
RiteCMS File Containment Vulnerability
RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a file inclusion vulnerability, the vulnerability stems from the admin.php component does not do effective filtering of local file resource calls, an attacker can use this vulnerability to read any file on th...
Unspecified Vulnerability in RiteCMS
RiteCMS is an open source content management system based on php and sqlite. An unspecified vulnerability exists in RiteCMS that stems from the use of insecure encryption to store passwords. No detailed vulnerability details are provided at this time...
RiteCMS Improper Access Control Vulnerability
RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from an improper access control vulnerability that stems from a lack of validity checking of paths in the /templates/ component when processing directory requests, which can be exploited by an attacker to...
RiteCMS Code Execution Vulnerability
RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a code execution vulnerability that stems from a flaw in the parsespecialtags function, which can be exploited by an attacker to cause remote code execution...
CVE-2025-67171
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal...
CVE-2025-67168
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...
CVE-2025-67173
A Cross-Site Request Forgery CSRF in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request...
CVE-2025-67172
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the parsespecialtags function...
CVE-2025-67170
A reflected cross-site scripting XSS vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload...
CVE-2025-67174
A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...
EUVD-2025-203932
A local file inclusion LFI vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the adminlanguagefile and defaultpagelanguagefile in the admin.php component...
EUVD-2025-203931
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords...