189 matches found
CVE-2023-2862
SiteServer CMS up to version 7.2.1 contains a cross-site scripting vulnerability in the /api/stl/actions/search endpoint. The issue stems from manipulating the ajaxDivId parameter in an unknown function, allowing remote exploitation. Public disclosure of exploits is indicated, and a patch is reco...
CVE-2023-2862: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
SiteServer CMS cross-site scripting vulnerabilities
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A cross-site scripting vulnerability exists in SiteServer CMS version 7.2.1 and prior versions, which stems from cross-site scripting due to incorrect manipulation of...
PT-2023-21852 · Unknown · Siteserver Cms
Name of the Vulnerable Software and Affected Versions: SiteServer CMS versions up to 7.2.1 Description: A problematic issue was found in the software, affecting an unknown function of the file /api/stl/actions/search. The manipulation of the ajaxDivId argument leads to cross-site scripting. It is...
SiteServer CMS 7.1.3 SQL Injection Vulnerability
According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is version 7.1.3. It is, therefore, affected by a vulnerability which permits remote authenticated attackers to perform a sql injection against the api/admin/settings/sitesTables/ endpoin...
SiteServer CMS 6.15.51 Multiple Vulnerabilities
According to its self-reported version number, the instance of SiteServer CMS hosted on the remote web server is 6.15.51. It is, therefore, affected by : - A Cross Site Scripting XSS flaw into the TbItemName parameters CVE-2021-42656, CVE-2022-30349. - A SQL injection vulnerability in the...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
Sql injection
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
SiteServer CMS SQL injection vulnerability
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
PT-2023-14446
Name of the Vulnerable Software and Affected Versions SiteServer CMS version 7.1.3 Description The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298: Improper Neutralization of Special Elements used in an SQL Command
SiteServer CMS 7.1.3 is vulnerable to SQL Injection...
CVE-2022-44298
SiteServer CMS 7.1.3 is affected by a SQL Injection vulnerability. The issue affects the product as described in multiple sources, with a high-severity score and a remote, network-exposed risk. One documented vector notes exploitation via the api/admin/settings/sitesTables/ endpoint, potentially ...
CVE-2022-44297
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...
Sql injection
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...