WonderCMS 0.3.3 Cross Site Scripting

Vulnerability ID: HTB22759 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwondercms.html Product: WonderCMS Vendor: Robert Isoski http://krneky.com/en/wondercms Vulnerable Version: 0.3.3 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: XSS Cross...

WonderCMS 0.3.3 - editText.php Cross-Site Scripting

WonderCMS 0.3.3 - editText.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45712/info WonderCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info WonderCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Cross-site Scripting (XSS) Vulnerability in WonderCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...

WonderCMS 'page' Parameter Cross Site Scripting And Information Disclosure Vulnerabilities

WonderCMS is prone to a cross-site scripting vulnerability and an information- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser...

WonderCMS <= 0.3 Multiple Vulnerabilities

WonderCMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wondercms:wondercms"; ifdescripti...