421 matches found
CVE-2020-23239
CVE-2020-23239 affects Textpattern CMS 4.8.1, with a cross-site scripting (XSS) flaw in the Menu Preferences Custom field. The vulnerability is described as enabling XSS via the Custom field in Menu Preferences. A related open-source/vuln source notes a vulnerability class for Textpattern CMS
CVE-2020-23239
Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...
CVE-2020-23239
Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...
PT-2021-10864
Name of the Vulnerable Software and Affected Versions Textpattern CMS version 4.8.1 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs via Custom fields in the Menu Preferences feature. Recommendations For Textpattern CMS version 4.8.1, update to a version that fixes thi...
Textpattern CMS cross-site scripting vulnerabilities
Textpattern is a free open-source content management system based on PHP and MySQL. version 4.8.1 of Textpattern contains a cross-site scripting vulnerability. An attacker can use this vulnerability to conduct cross-site scripting attacks via the "Custom" field in the "Menu Preferences" feature...
CVE-2020-23239: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...
Textpattern CMS suffers from a file upload vulnerability (CNVD-2021-51401)
Textpattern CMS is a free open source content management system based on PHP and MySQL. A file upload vulnerability exists in Textpattern CMS version 4.8.7, which can be exploited by an attacker to gain control of the server...
Textpattern CMS Detection (HTTP)
HTTP based detection of Textpattern CMS. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.146229";...
TextPattern CMS 4.9.0-dev - Remote Command Execution (Authenticated) Exploit
Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3 import requests fro...
TextPattern CMS 4.9.0-dev - Remote Command Execution (RCE) (Authenticated)
Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Date: 07/04/2021 Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3...
TextPattern CMS 4.9.0-dev Remote Command Execution
Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Date: 07/04/2021 Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3...
Textpattern Arbitrary File Upload Vulnerability
Textpattern is a free open source content management system based on PHP and MySQL. Textpattern has an arbitrary file upload vulnerability. An attacker can use the fileinsert function in include/txpfile.php to upload arbitrary files...
File Upload Vulnerability in Textpattern CMS
Textpattern CMS is a free open source content management system based on PHP and MySQL. Textpattern CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
Design/Logic Flaw
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
Textpattern 4.7.3 contains an aribtrary file load via the fileinsert function in include/txpfile.php...
CVE-2020-19510
CVE-2020-19510 affects Textpattern 4.7.3, where an arbitrary file load/upload is possible through the file_insert function in include/txp_file.php. The connected sources consistently describe this vulnerability as an arbitrary file upload issue in Textpattern; no exploit details are provided in t...
PT-2021-10363
Name of the Vulnerable Software and Affected Versions: Textpattern version 4.7.3 Description: The issue concerns an arbitrary file load via the file insert function in include/txp file.php. Recommendations: For Textpattern version 4.7.3, consider disabling the file insert function in include/txp...