CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

CVE-2021-42654

SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...

CVE-2021-42656

SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-42655

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...

Malicious code in SitеServer.Рlugin (NuGet)

--- -= Per source details. Do not edit below this line.=-...

GHSA-63C6-W556-3H7Q SSCMS vulnerable to Cross Site Scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

SSCMS vulnerable to Cross Site Scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

CVE-2023-2862

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

CVE-2023-2862

SiteServer CMS up to version 7.2.1 contains a cross-site scripting vulnerability in the /api/stl/actions/search endpoint. The issue stems from manipulating the ajaxDivId parameter in an unknown function, allowing remote exploitation. Public disclosure of exploits is indicated, and a patch is reco...

CVE-2023-2862 SiteServer CMS search cross site scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

CVE-2023-2862 SiteServer CMS search cross site scripting

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

CVE-2023-2862: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

PT-2023-21852 · Unknown · Siteserver Cms

Name of the Vulnerable Software and Affected Versions: SiteServer CMS versions up to 7.2.1 Description: A problematic issue was found in the software, affecting an unknown function of the file /api/stl/actions/search. The manipulation of the ajaxDivId argument leads to cross-site scripting. It is...

SiteServer CMS 跨站脚本漏洞

SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A cross-site scripting vulnerability exists in SiteServer CMS version 7.2.1 and prior versions, which stems from cross-site scripting due to incorrect manipulation of...

SiteServer CMS 6.15.51 Multiple Vulnerabilities

According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is 6.15.51. It is, therefore, affected by : - A Cross Site Scripting XSS flaw into the TbItemName parameters CVE-2021-42656, CVE-2022-30349. - A SQL injection vulnerability in the...

SiteServer CMS 7.1.3 SQL Injection Vulnerability

According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is version 7.1.3. It is, therefore, affected by a vulnerability which permits remote authenticated attackers to perform a sql injection against the api/admin/settings/sitesTables/ endpoin...

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

Sql injection

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

CVE-2022-44298

SiteServer CMS 7.1.3 is affected by a SQL Injection vulnerability. The issue affects the product as described in multiple sources, with a high-severity score and a remote, network-exposed risk. One documented vector notes exploitation via the api/admin/settings/sitesTables/ endpoint, potentially ...