477 matches found
CVE-2020-19158
Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...
CVE-2020-19158
Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...
Cross site scripting
Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...
CVE-2020-19158
Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...
CVE-2020-19158
CVE-2020-19158 affects S-CMS (build 20191014 and earlier). The vulnerability is a Cross Site Scripting (XSS) in the Site Title parameter of the component /data/admin/#/app/config/, allowing remote attackers to execute arbitrary code. No remediation details are provided in the connected documents.
CVE-2020-19158: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin//app/config/'...
PT-2021-10298
Name of the Vulnerable Software and Affected Versions: S-CMS versions 20191014 and earlier Description: The issue allows remote attackers to execute arbitrary code via the Site Title parameter of the component "/data/admin//app/config/". This enables attackers to perform Cross Site Scripting XSS...
S-CMS SQL Injection Vulnerability (CNVD-2021-93907)
S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a SQL injection vulnerability exists in the 4.edu.phpconnfunction.php component of S-CMS version 1.0. An attacker can use this vulnerability to access sensitive...
CVE-2020-20340
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
CVE-2020-20340
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
Sql injection
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
CVE-2020-20340
CVE-2020-20340 affects S-CMS v1.0, where a SQL injection flaw in the 4.edu.phpconnfunction.php component exposes sensitive database information. Connected sources corroborate the issue in S-CMS, linking the vulnerability to the 4.edu.phpconnfunction.php path and version 1.0. The root cause is uns...
CVE-2020-20340
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
S-CMS SQL注入漏洞
S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a SQL injection vulnerability exists in the 4.edu.phpconnfunction.php component of S-CMS version 1.0. An attacker can use this vulnerability to access sensitive...
CVE-2020-20340: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information...
PT-2021-10477
Name of the Vulnerable Software and Affected Versions: S-CMS version 1.0 Description: A SQL injection issue in the 4.edu.phpconnfunction.php component allows attackers to access sensitive database information. Recommendations: For S-CMS version 1.0, consider restricting access to the 4.edu.php...
CVE-2020-19046
Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...
Cross site scripting
Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...
CVE-2020-19046
CVE-2020-19046 concerns a cross-site scripting (XSS) vulnerability in S-CMS v1.0. The issue is triggered via the component “/admin/tpl.php?page=”, allowing remote attackers to execute arbitrary code. The available connected sources consistently describe the vulnerability as an XSS in S-CMS v1.0 w...
CVE-2020-19046: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='...