Lucene search
+L

400 matches found

OSV
OSV
added 2021/07/30 2:15 p.m.8 views

CVE-2020-20699

A cross site scripting XSS vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings...

4.8CVSS5.6AI score0.00527EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/30 2:15 p.m.28 views

CVE-2020-20700

A stored cross site scripting XSS vulnerability in /app/formadd/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box...

4.8CVSS0.00579EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/30 2:15 p.m.5 views

CVE-2020-20701

A stored cross site scripting XSS vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

4.8CVSS5.6AI score0.00579EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/30 2:15 p.m.25 views

Cross site scripting

A stored cross site scripting XSS vulnerability in /app/formadd/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box...

3.5CVSS5AI score0.00579EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/07/30 2:15 p.m.28 views

Cross site scripting

A cross site scripting XSS vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings...

3.5CVSS5.1AI score0.00527EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/07/30 2:15 p.m.28 views

Remote code execution

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

6.5CVSS7.4AI score0.0195EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/07/30 2:15 p.m.23 views

Cross site scripting

A stored cross site scripting XSS vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

3.5CVSS5AI score0.00579EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/07/30 12:0 a.m.7 views

S-CMS 跨站脚本漏洞

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites...

4.8CVSS5.4AI score0.00579EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/07/28 12:0 a.m.32 views

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58260)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites...

4.8CVSS1.9AI score0.00579EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/07/28 12:0 a.m.25 views

S-CMS Remote Code Execution Vulnerability (CNVD-2021-94956)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a remote code execution vulnerability exists in /1.com.php in S-CMS version 3.0 PHP version. An attacker can exploit the vulnerability by modifying PHP files to get ...

7.2CVSS5AI score0.0195EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/07/28 12:0 a.m.23 views

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58259)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. /app/formadd/ in S-CMS 3.0 has a stored cross-site scripting vulnerability that can be exploited to execute arbitrary Web scripts or HTML via the title entry text bo...

4.8CVSS1.2AI score0.00579EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/07/28 12:0 a.m.53 views

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58258)

S-CMS 3.0 has a cross-site scripting vulnerability, which can be exploited by attackers via the "Copyright" text box under "Basic Settings" to execute arbitrary Web scripts or HTML. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the "Copyright" text box under "Bas...

4.8CVSS3.4AI score0.00527EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/07/27 10:19 p.m.37 views

CVE-2020-20701

A stored cross site scripting XSS vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.1AI score0.00579EPSS
SaveExploits1References1
CVE
CVE
added 2021/07/27 10:19 p.m.65 views

CVE-2020-20701

CVE-2020-20701 documents a stored cross-site scripting (XSS) vulnerability in the S-CMS product, specifically affecting S-CMS PHP v3.0 . The issue allows an attacker to inject and store a crafted payload that, when viewed by a user, can cause arbitrary web scripts or HTML to be executed in the co...

4.8CVSS5AI score0.00579EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/07/27 10:19 p.m.60 views

CVE-2020-20700

CVE-2020-20700 describes a stored cross-site scripting (XSS) vulnerability in /app/form_add/ of S-CMS PHP v3.0. The issue arises from a crafted payload entered into the Title Entry text box, enabling execution of arbitrary web scripts/HTML. Affected software: S-CMS PHP v3.0; vulnerable component:...

4.8CVSS5AI score0.00579EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/07/27 10:19 p.m.61 views

CVE-2020-20699

S-CMS PHP v3.0 has a cross-site scripting (XSS) vulnerability exploitable via the Copyright field in Basic Settings, allowing arbitrary web scripts/HTML execution. The vulnerability is consistently described across NVD/Red Hat/CNNVD/CNVD feeds as CVE-2020-20699, with no connected document providi...

4.8CVSS5.1AI score0.00527EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/27 10:19 p.m.28 views

CVE-2020-20699

A cross site scripting XSS vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings...

5.1AI score0.00527EPSS
SaveExploits1References1
CVE
CVE
added 2021/07/27 10:19 p.m.56 views

CVE-2020-20698

CVE-2020-20698 describes a remote code execution vulnerability in S-CMS PHP v3.0, exploitable via modification of /1.com.php to obtain shell access. Affected component is the PHP web application’s /1.com.php entry point; underlying cause is not explicitly detailed in the provided documents. Impac...

7.2CVSS7.3AI score0.0195EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/27 10:19 p.m.34 views

CVE-2020-20698

A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...

7.4AI score0.0195EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/06/17 12:0 a.m.13 views

Logic Flaw Vulnerability in S-CMS Enterprise Website Builder System (CNVD-2021-45182)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A logic flaw vulnerability exists in the S-CMS enterprise website builder system, which can be exploited by an attacker to compromis...

6.9AI score
SaveExploits0
Rows per page
Query Builder