CVE-2021-20810

Cross-site scripting vulnerability in Website Management screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

CVE-2021-20810

Cross-site scripting vulnerability in Website Management screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

CVE-2021-20810

Cross-site scripting vulnerability in Website Management screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

CVE-2021-20810

CVE-2021-20810 is a Cross-site scripting vulnerability in Movable Type’s Website Management screen affecting MT 7 up to r4903, MT 6.x, MT Advanced 7 up to r4903, MT Premium 1.44 and Premium Advanced 1.44 (and related MT Series). The root cause is insufficient input sanitization enabling arbitrary...

CVE-2021-20810

Cross-site scripting vulnerability in Website Management screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

PT-2021-14264

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.4903 and earlier Movable Type 6 versions 6.8.0 and earlier Movable Type Advanced versions 7 r.4903 and earlier Movable Type Premium versions 1.44 and earlier Movable Type Premium Advanced versions 1.44 and earlier...

CVE-2021-20810: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Website Management screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

Multiple cross-site scripting vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Cross-site scripting vulnerability in Search screen CWE-79 - CVE-2021-20808 Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type CWE-79 -...

ESPCMS suffers from a command execution vulnerability (CNVD-2021-51346)

ESPCMS is an enterprise building management system based on PHP+MYSQL. A command execution vulnerability exists in ESPCMS, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in ESPCMS Professional Edition

ESPCMS is a PHP MYSQL based enterprise building management system. ESPCMS Professional Edition suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ESPCMS suffers from SQL injection vulnerability (CNVD-2021-51392)

ESPCMS is a PHP MYSQL based enterprise building management system. ESPCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Vano enterprise website management system (PHP version) file contains vulnerabilities

Vanno enterprise website management system PHP is based on php + MySQL development of enterprise website management system. A file inclusion vulnerability exists in Vanno Enterprise Website Management System PHP, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in zzcms 2020

zzcms is a free website management system. A command execution vulnerability exists in zzcms 2020, which can be exploited by an attacker to gain control of the server...

FangfaCMS suffers from SQL injection vulnerability (CNVD-2021-39291)

Method Digital Web Content Management System FangfaCms is an enterprise-level PHPCMS website management system. FangfaCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35835)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-34291)

Xionghai CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29093)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in EmpireCMS

Empire CMS" English translation for "Empire CMS", referred to as "Ecms", which is based on the B / S structure, and powerful and Empire CMS-logo easy to use website management system. EmpireCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28838)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28464)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...