153 matches found
CVE-2023-2862
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
Cross site scripting
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
CVE-2023-2862
SiteServer CMS up to version 7.2.1 contains a cross-site scripting vulnerability in the /api/stl/actions/search endpoint. The issue stems from manipulating the ajaxDivId parameter in an unknown function, allowing remote exploitation. Public disclosure of exploits is indicated, and a patch is reco...
CVE-2023-2862 SiteServer CMS search cross site scripting
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
CVE-2023-2862 SiteServer CMS search cross site scripting
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
PT-2023-21852 · Unknown · Siteserver Cms
Name of the Vulnerable Software and Affected Versions: SiteServer CMS versions up to 7.2.1 Description: A problematic issue was found in the software, affecting an unknown function of the file /api/stl/actions/search. The manipulation of the ajaxDivId argument leads to cross-site scripting. It is...
SiteServer CMS 跨站脚本漏洞
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A cross-site scripting vulnerability exists in SiteServer CMS version 7.2.1 and prior versions, which stems from cross-site scripting due to incorrect manipulation of...
SiteServer CMS 6.15.51 Multiple Vulnerabilities
According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is 6.15.51. It is, therefore, affected by : - A Cross Site Scripting XSS flaw into the TbItemName parameters CVE-2021-42656, CVE-2022-30349. - A SQL injection vulnerability in the...
SiteServer CMS 7.1.3 SQL Injection Vulnerability
According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is version 7.1.3. It is, therefore, affected by a vulnerability which permits remote authenticated attackers to perform a sql injection against the api/admin/settings/sitesTables/ endpoin...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
Sql injection
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
SiteServer CMS SQL注入漏洞
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is affected by a SQL Injection vulnerability. The issue affects the product as described in multiple sources, with a high-severity score and a remote, network-exposed risk. One documented vector notes exploitation via the api/admin/settings/sitesTables/ endpoint, potentially ...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44297
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...
Sql injection
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...