Lucene search
K

825 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/07 12:0 a.m.2 views

The vulnerability of the thinkphp/library/think/App.php component in the ThinkPHP framework allows a attacker to execute arbitrary PHP code on the target system.

The vulnerability of the thinkphp/library/think/App.php component in the ThinkPHP framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code on the target system remotely...

10CVSS7.8AI score0.9953EPSS
Exploits4References6Affected Software1
CNVD
CNVD
added 2021/09/02 12:0 a.m.16 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69271)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the link fields under the menu management module of the WTCMS backend. No detailed vulnerability details are provided at this time...

5.4CVSS1.6AI score0.00531EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/02 12:0 a.m.13 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69270)

WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...

5.4CVSS1.2AI score0.00503EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/02 12:0 a.m.14 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...

5.4CVSS1.5AI score0.00503EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/02 12:0 a.m.15 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69269)

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...

5.4CVSS2.3AI score0.00738EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/02 12:0 a.m.19 views

WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69272)

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

5.4CVSS1.1AI score0.00531EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/02 12:0 a.m.20 views

WTCMS Cross-site Request Forgery Vulnerability (CNVD-2021-69267)

WTCMS is a content management system CMS based on ThinkPHP. index.php?g=admin in WTCMS...

6.5CVSS1.6AI score0.00425EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/01 12:0 a.m.3 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...

5.4CVSS5.1AI score0.00503EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/01 12:0 a.m.3 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...

5.4CVSS5.1AI score0.00503EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/01 12:0 a.m.2 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the WTCMS page management backend. An attacker can exploit the vulnerability to obtain a cookie by entering a specially crafted payload into the search box...

5.4CVSS5.2AI score0.00738EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/09/01 12:0 a.m.4 views

WTCMS 跨站脚本漏洞

WTCMS is a content management system CMS based on ThinkPHP. a cross-site scripting vulnerability exists in the link address field under the link module of the WTCMS backend. No details of the vulnerability are currently available...

5.4CVSS5.2AI score0.00531EPSS
Exploits1References2
OSV
OSV
added 2021/08/26 3:15 a.m.1 views

CVE-2020-19705

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...

9.8CVSS7.3AI score0.00988EPSS
Exploits1References1
NVD
NVD
added 2021/08/26 3:15 a.m.10 views

CVE-2020-19705

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...

9.8CVSS0.00988EPSS
Exploits1References1
Prion
Prion
added 2021/08/26 3:15 a.m.12 views

Sql injection

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...

7.5CVSS9.8AI score0.00988EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/26 2:23 a.m.15 views

CVE-2020-19705

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add...

9.9AI score0.00988EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/08/26 12:0 a.m.2 views

thinkphp-zcms SQL注入漏洞

thinkphp-zcms is open source based on thinkphp3.2 development of a cms system , more comprehensive features . thinkphp-zcms There is a SQL injection vulnerability , an attacker can use the vulnerability through index.php?m=home&c=message&a=add to execute arbitrary SQL commands...

9.8CVSS8.9AI score0.00988EPSS
Exploits1References2
CNVD
CNVD
added 2021/08/23 12:0 a.m.13 views

EyouCMS Cross-site Request Forgery Vulnerability

EyouCMS is an open source content management system CMS based on ThinkPHP.EyouCMS suffers from a cross-site request forgery vulnerability, which stems from a cross-site request forgery CSRF vulnerability in EyouCMS 1.3.6. An attacker could use the vulnerability to execute js code by adding an htm...

6.8CVSS3.7AI score0.00573EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2021/08/21 12:0 a.m.17 views

EyouCMS Cross-Site Scripting Vulnerability (CNVD-2021-82434)

EyouCMS is an open source content management system CMS based on ThinkPHP.EyouCMS has a cross-site scripting vulnerability in version 1.3.6, which stems from a lack of validation of user input data and filtering of input data in the basicinformation area. An attacker could use this vulnerability ...

3.5CVSS2.8AI score0.00522EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2021/08/19 12:0 a.m.19 views

Eyoucms Cross-Site Scripting Vulnerability (CNVD-2022-13193)

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China.Eyoucms 1.4.7 and previous versions have a cross-site scripting vulnerability, which stems from the fact that the addonfieldext parameter is not validate...

6.1CVSS2.1AI score0.01458EPSS
Exploits1References1
CNVD
CNVD
added 2021/08/19 12:0 a.m.22 views

EyouCms cross-site request forgery vulnerability

Eyoucms is an open source content management system CMS based on ThinkPHP. eyoucms has a cross-site request forgery vulnerability in version 1.3.6, which stems from a WEB application that does not sufficiently verify that requests come from trusted users. An attacker can use the forged malicious...

6.8CVSS3.9AI score0.00605EPSS
Exploits1Affected Software1
Rows per page
Query Builder