88 matches found
CVE-2023-43953
CVE-2023-43953 : SSCMS 7.2.2 contains a cross-site scripting (XSS) vulnerability in the Content Management component. The CVE entry notes a medium severity (CVSS 3.1: 5.4) with network attack vector, user interaction required, and scope change; no exploitation details are provided in the initial ...
CVE-2023-43953
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...
CVE-2023-43953
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...
CVE-2023-43951
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...
CVE-2023-43951
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...
CVE-2023-43952
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting XSS vulnerability via the Material Management component...
CVE-2023-43953: Improper Neutralization of Input During Web Page Generation
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Content Management component...
CVE-2023-43951
CVE-2023-43951 affects SSCMS version 7.2.2, with a cross-site scripting (XSS) vulnerability in the Column Management component. The Redhat/EUVD/CNNVD and third-party sources corroborate an XSS flaw in SSCMS 7.2.2 via Column Management. Exploitation details are not provided in the documents; no in...
CVE-2023-43952
SSCMS 7.2.2 has a stored XSS vulnerability in the Material Management component. Affected product: SSCMS (SiteServerCMS) version 7.2.2. Impact: stored cross-site scripting; details on root cause are not provided in the documents. No exploitation details are listed. Remediation: update to a versio...
CVE-2023-43952
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting XSS vulnerability via the Material Management component...
CVE-2023-43951: Improper Neutralization of Input During Web Page Generation
SSCMS 7.2.2 was discovered to contain a cross-site scripting XSS vulnerability via the Column Management component...
PT-2023-29048 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Content Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: Fo...
PT-2023-29046 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A cross-site scripting XSS issue was found in the Column Management component. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For...
PT-2023-29047 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.2.2 Description: A stored cross-site scripting XSS issue was found in the Material Management component. This allows for malicious scripts to be stored and executed on the system. Recommendations: For SSCMS version 7.2.2, upda...
Cross-site Scripting (XSS)
SSCMS is vulnerable to Cross-site Scripting XSS. The vulnerability exists because of the improper sanitization in the ajaxDivId argument in the Submit function of ActionsSearchController.Submit.cs, which allows an attacker to inject and execute malicious javascript through the...
CVE-2022-44299: Improper Limitation of a Pathname to a Restricted Directory
SiteServerCMS 7.1.3 sscms has a file read vulnerability...
CVE-2022-44299
SiteServerCMS 7.1.3 sscms is vulnerable to an Arbitrary File Read due to insufficient validation in ReadTextAsync, enabling leakage of sensitive files. Public reports describe a path/file-read vulnerability that can disclose data without user interaction over network access; exploitation details ...
SSCMS-PluginShell
安装VisualStudio 2. 导入该项目 3. 修改Startup.cs文件中的IPAddress.Parse值 c using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using System.Text; using System.Net.Sockets; using...
