BigTree CMS < 4.2.22 XSS Vulnerability

BigTree CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

CVE-2018-10364

BigTree CMS

Cubic CMS多个安全漏洞

Cubic CMS是一款内容管理系统。 由于/login.usuario没有正确过滤传递的'login'和'pass' POST参数的用户输入，允许远程攻击者注入或操纵SQL查询。 0 Cubic CMS 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cubicfactory.com/ I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals o...

Cubic CMS SQL Injection / LFI / Path Disclosure

I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals of any size, powerful, adaptable to any graphic design that allows users administration 100% professional but simple at the same time that website. II. VULNERABILITIES...