CVE-2019-16719

WTCMS 1.0 allows index.php?g=admin=index=index CSRF with resultant XSS...

EUVD-2020-13131

Malware in sbrugna...

EUVD-2020-13130

Malware in sbrugna...

EUVD-2020-13132

Malware in sbrugna...

EUVD-2019-18297

Malware in sbrugna...

EUVD-2018-2341

Malware in sbrugna...

EUVD-2019-7268

Malware in sbrugna...

EUVD-2020-13136

Malware in sbrugna...

EUVD-2020-13135

Malware in sbrugna...

CVE-2020-20348

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin=nav=addpost component that allows attackers to arbitrarily add articles in the administrator background...

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

CVE-2020-20347

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...

CVE-2019-8910

An issue was discovered in WTCMS 1.0. It allows index.php?g=admin=setting=sitepost CSRF...

CVE-2024-48238

WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...

CVE-2024-48238

WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...

CVE-2024-48237

CVE-2024-48237 affects WTCMS 1.0. The vulnerability is an Incorrect Access Control issue in the file \Common\Controller\HomebaseController.class.php. The available documents confirm the affected software and the component, but do not provide explicit technical details about the root cause beyond ...

CVE-2024-48237

WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php...

CVE-2024-48238

WTCMS 1.0 is vulnerable to SQL Injection in the editpost method of /Admin\Controller\NavControl.class.php via the parentid parameter...

CVE-2024-48238

CVE-2024-48238 affects WTCMS 1.0. The vulnerability is a SQL injection in the edit_post functionality implemented in /Admin/Controller/NavControl.class.php via the parentid parameter. The Red Hat, NVD, CVE listings corroborate the same description. Affected component: WTCMS 1.0; vulnerability typ...