Stored Cross-Site Scripting Vulnerability in LJCMS

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

XSS Vulnerability in FoosunCMS

FoosunCMS content management system FoosunCMS is a content management software based on ASP + ACCESS/MSSQ framework, a domestic open source, integrated web2.0 elements, modular CMS station-building system. FoosunCMS has a stored cross-site scripting vulnerability. Attackers can insert malicious j...

Stored Cross-Site Scripting Vulnerability in LJCMS (CNVD-2020-18758)

LJCMS is a free and open source content management system. A stored cross-site scripting vulnerability exists in LJCMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

CVE-2020-6845

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack...

Stored Cross-site Scripting Vulnerability in Tuan Ah VIP Movie System re***.php File

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A stored cross-site scripting vulnerability exists in the re.php file of the Tuan Ah VIP Movie System. An attacker can insert malicious js code into the page to obtain user cookies and other...

Stored Cross-Site Scripting Vulnerability in QCMS Website Management System Before and After

QCMS website management system is a PHP lightweight system developed through MVC architecture. A stored cross-site scripting vulnerability exists before and after the QCMS website management system. An attacker can insert malicious js code into a page to obtain user cookies and other information,...

Stored Cross-Site Scripting Vulnerability in RiverHub Technology Mall System

Shenyang Hehan Technology Co., Ltd. is a group company that provides online marketing services to customers. A stored cross-site scripting vulnerability exists in the RiverHan Technology Mall system. Attackers can insert malicious js code in the page to obtain user cookies and other information,...

Stored Cross-site Scripting Vulnerability in Hsycms Frontend Messages

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. A stored cross-site scripting vulnerability exists in the Hsycms frontend message. An attacker can insert malicious js code into...

Stored Cross-site Scripting Vulnerability in the Us***.cl***.php File in the Frontend of the Feifei Movie and TV Navigation System

FeiFei Film and TV Navigation System FeiFeiCms is a free and open source PHP movie program. A stored cross-site scripting vulnerability exists in the Us.cl.php file in the frontend of FeiFeiCms. Attackers can insert malicious js code in the page to obtain user cookies and other information,...

Stored Cross-Site Scripting Vulnerability in CatFishCMS V4.9.6

CatfishCMS is an open source content management system CMS written in PHP. A stored cross-site scripting vulnerability exists in CatFishCMS V4.9.6. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Stored Cross-Site Scripting Vulnerability in BigTree CMS

BigTree CMS is an open source content management system based on PHP and MySQL. A stored cross-site scripting vulnerability exists in BigTree CMS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Storage-based Cross-site Scripting Vulnerability in the Frontend of Feifei Movie Navigation System

FeiFeiCms is developed by PHP+Mysql technology and can run on windows and Linux system platform. A stored cross-site scripting vulnerability exists in the frontend of FeiFeiCms. Attackers can insert malicious js code into the page to obtain user cookies and other information, resulting in user...

Stored cross-site scripting vulnerability in the cr***_sh***.php file of the TreeHole outbound link system

Treehole external link system is a free and open source PHP external link network disk system. A stored cross-site scripting vulnerability exists in the crsh.php file of TreeHole Outbound System. Attackers can insert malicious js code in the page to obtain user cookies and other information,...

Stored Cross-Site Scripting Vulnerability in Public Resources Trading Center of Jiangsu Guotai Newpoint Software Co.

Jiangsu Guotai New Point Software Co., Ltd. is to provide e-government, public resources trading, electronic bidding, construction industry, smart city and other fields of related software products and hardware and software integration solutions. A stored cross-site scripting vulnerability exists...

Stored Cross-Site Scripting Vulnerability at the Address of Cloud EC E-commerce System V1.2.4

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system V1.2.4 address at the existence of stored cross-site scripting vulnerability, the...

Stored cross-site scripting vulnerability in PHPOK up***_co***.php file

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A stored cross-site scripting vulnerability exists in the PHPOK upco.php file. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...

xss vulnerability in the profile area of cityleague's website builder system

City Union is a local portal alliance website organized by Beijing City Union Technology Co. There is an xss vulnerability in the profile area of the Cities Alliance website builder system, which can be exploited by attackers to insert malicious js code into the page, obtain user cookies and othe...

Stored Cross-Site Scripting Vulnerability in the Daimi CMS da***.me***.php File (CNVD-2019-06660)

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A stored cross-site scripting vulnerability exists in the dam.mem.php file of the Dami CMS. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading ...

Stored Cross-Site Scripting Vulnerability in Zendo Project Management Software z***-c***.php

Zendo Project Management Software is homegrown open source project management software. A stored cross-site scripting vulnerability exists in Zendo Project Management Software z-c.php. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to...

Stored Cross-Site Scripting Vulnerability in ThinkSAAS

ThinkSAAS is a lightweight open source community system that can be used to build discussion groups, bbs and circles. A stored cross-site scripting vulnerability exists in ThinkSAAS. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user...