Frog CMS 0.9.5 Cross Site Scripting

Exploit Title: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings Date: 2018-04-23 Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version: 0.9.5 Tested on: php 5.6...

Frog CMS 0.9.5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/philippe/FrogCMS Software Link:...

Frog CMS 0.9.5 - Persistent Cross-Site Scripting

Exploit Title: Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings Date: 2018-04-23 Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version: 0.9.5 Tested on: php 5.6...

CVE-2018-10367

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

CVE-2018-10367: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the title or content section...

PT-2018-9852 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered in the content-management feature, which has Stored XSS via the title or content section. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

CVE-2018-10321

Summary: Frog CMS 0.9.5 has a stored Cross-Site Scripting vulnerability via the Settings page’s Admin Site title. An admin can inject payloads that are stored and later executed in other contexts, per multiple sources. Public exploits exist (e.g., Exploit-DB and PacketStorm entries) describing th...

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure

Ericsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure -- coding: utf-8 -- Exploit Title: Ericsson-LG iPECS NMS - Cleartext Cred. Dump Vendor Notification: 03-03-2018 - No response Initial CVE: 04-04-2018 Disclosure: 21-04-2018 Exploit Author: Berk Cem Göksel Contact: twitter.com/berkcgoks...

CVE-2018-10321: Improper Neutralization of Input During Web Page Generation

Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-08588)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in MiniCMS version 1.10. A remote attacker can exploit this vulnerability to obtain a user cookie with the 'title' parameter...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08587)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. The vulnerability can be exploite...

PRTG Network Monitor < 18.1.39.1648 - Stack Overflow Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: PRTG 18.1.39.1648 - Stack Overflow Exploit Author: Lucas "luriel" Carmo Vendor Homepage: https://www.paessler.com/prtg Software Link: https://www.paessler.com/download/prtg-download Version: 18.1.39.1648 CVE : CVE-2018-10253 Post...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2018-10296

Technical details for CVE-2018-10296 are not publicly available in the provided documents. No concrete affected versions, root cause, or remediation are shown here. Monitor for updates in connected sources.

CVE-2018-10296: Improper Neutralization of Input During Web Page Generation

MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter...

CVE-2017-17902: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI...