41 matches found
CVE-2022-3464
CVE-2022-3464 puppyCMS 5.1까지에서 문제성problematic으로 분류된 취약점이 발견되었습니다. 이 취약점은 /admin/settings.php 파일의 알 수 없는 부분에 영향을 미칩니다. sitename 인수를 조작하면 교차 사이트 스크립팅XSS이 발생합니다. 원격으로 공격을 시작할 수 있습니다. 이 취약점의 관련 식별자는 VDB-210699입니다. 인증| 복잡성| 벡터 ---|---|--- 제공되지 않음| 제공되지 않음| 제공되지 않음 기밀성| 무결성| 가용성 ---|---|--- 제공되지 않음| 제공...
CVE-2026-86294 SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting
A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...
CVE-2026-86294
SourceCodester Simple Traffic Offense System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Settings Update Endpoint (file save-settings.php). The root cause is improper handling of the site_name/site_desc arguments, which can be manipulated by a remote, unauthenticated atta...
CVE-2026-86294: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...
EUVD-2021-25148
Malware in sbrugna...
EUVD-2019-7873
Malware in sbrugna...
EUVD-2018-13112
Malware in sbrugna...
EUVD-2017-5293
Malware in sbrugna...
CVE-2025-5661: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument sitename leads to cross site scripting. It is...
CVE-2018-18892
MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the sitename field in mcconf.php...
CVE-2022-3464: Improper Neutralization
A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...
CVE-2021-38710: Improper Neutralization of Input During Web Page Generation
Static Persistent XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITENAME parameter...
CVE-2012-2629
Multiple cross-site request forgery CSRF and cross-site scripting XSS vulnerabilities in Axous 1.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add an administrator account via an addnew action to admin/administratorsadd.php; or 2 conduct...
CVE-2019-17522: Improper Neutralization of Input During Web Page Generation
A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the adminindex.php?page=settings SITE NAME field aka SITENAME, a related issue to CVE-2011-4709.1...
CVE-2019-8438: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting-site setting" of admin/index.php, aka sitename...
Design/Logic Flaw
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...
CVE-2018-20558: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...
CVE-2018-18416
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the sitename parameter to the admin/settings/update URI...
