12 matches found
EUVD-2020-11064
Malware in sbrugna...
CVE-2020-19157
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter=index'...
CVE-2022-31504
The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31504
The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2020-19157
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'...
CVE-2020-19157
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'...
Cross site scripting
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'...
CVE-2020-19157
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'...
CVE-2020-19157
Wenku CMS v3.4 contains a Cross Site Scripting (CSS) vulnerability in the ucenter index component. The flaw allows remote attackers to inject and execute arbitrary code via the Intro parameter in /index.php?m=ucenter&a=index. The NVD entry (CVE-2020-19157) lists CVSS2 base score 4.3 (MEDIUM) with...
Wenku CMS 跨站脚本漏洞
Wenku CMS is a website CMS. A security vulnerability exists in Wenku CMS v3.4 that allows remote attackers to execute arbitrary code via the "Intro" parameter of the component "/index.php?m=ucenter&a=index"...
PT-2021-10297
Name of the Vulnerable Software and Affected Versions: Wenku CMS version 3.4 Description: The issue allows remote attackers to execute arbitrary code via the Intro parameter for the component "/index.php?m=ucenter&a=index". This enables attackers to perform Cross Site Scripting CSS attacks...
CVE-2020-19157: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting CSS in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'...