7318 matches found
Cross site scripting
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-17044: Improper Neutralization of Input During Web Page Generation
In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...
Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03469)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...
Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2019-03473)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4, which c...
Apache Syncope 2.0.7 - Remote Code Execution
Exploit Title: Apache Syncope 2.0.7 - Remote Code Execution Date: 2018-09-12 Exploit Author: Che-Chun Kuo Vendor Homepage: https://syncope.apache.org/ Software Link: http://archive.apache.org/dist/syncope/ Version: 2.0.7 Tested on: Windows Advisory: https://syncope.apache.org/security CVE:...
jiNa OCR Image To Text 1.0 Denial Of Service
Exploit Title: jiNa OCR Image to Text 1.0 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-10 Software Link: http://www.convertimagetotext.net/downloadsoftware.php Tested Version: 1.0 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it...
Easy File Sharing Web Server 6.9 Buffer Overflow Exploit
Easy File Sharing Web Server version 6.9 POST msg.ghp UserID remote buffer overflow SEH exploit with DEP bypass and ROP. !/usr/bin/python Exploit Title: Easy File Sharing Web Server 6.9 - 'POST' msg.ghp 'UserID' Remote Buffer Overflow SEHDEP Bypass + ROP Google Dork: intitle:"Login - powered by...
CVE-2018-16772
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...
CVE-2018-16772
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...
Hoosk Cross-Site Scripting Vulnerability
Hoosk is a lightweight user-centered content management system CMS. The system has built-in Codelgniter for creating responsive websites. A cross-site scripting vulnerability exists in Hoosk 1.7.0, which can be exploited by an attacker via the navigation title of a new page entered at...
CVE-2018-16772: Improper Neutralization of Input During Web Page Generation
Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new...
Cross-site Scripting (XSS)
Kamsar.WebConsole is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of html encoding in the value of Title of RenderHead, allowing XSS attacks...
CVE-2018-16325
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
CVE-2018-16325
GetSimple CMS 3.4.0.9 is affected by Stored/ reflected XSS via the admin/edit.php title field (CVE-2018-16325). The available connected documents confirm XSS in the title input, but do not provide exploitation details or a patch/mitigation entry. No explicit root-cause or vulnerable vector beyond...
CVE-2018-16325: Improper Neutralization of Input During Web Page Generation
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...
RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)
Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...
CVE-2018-15567
CMSUno before 1.5.3 has XSS via the title field...
CVE-2018-15567
CMSUno before 1.5.3 has XSS via the title field...
CVE-2018-15567
CMSUno before 1.5.3 is vulnerable to a cross-site scripting (XSS) issue in the title field. The vulnerability is described as XSS via the title field, affecting versions prior to 1.5.3. Exploitation details, impacted components beyond the title field, and remediation steps are not provided in the...