Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/09/17 8:49 a.m.•31 views

CVE-2025-10434

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is...

4.8CVSS5.4AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/15 9:15 a.m.•22 views

CVE-2025-10434

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is...

4.8CVSS0.00267EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•23 views

PT-2025-37460

Name of the Vulnerable Software and Affected Versions: IbuyuCMS versions up to 2.6.3 Description: A vulnerability exists in IbuyuCMS that allows for cross site scripting. The issue is located in the Add Article Page component, specifically within the file /admin/article.php?a=mod. Manipulation of...

4.8CVSS2.7AI score0.00267EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•5 views

CVE-2025-10434: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is...

4.8CVSS3.8AI score0.00267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/03 12:00 a.m.•5 views

CVE-2021-36484: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page...

9.8CVSS6AI score0.0085EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/03 12:00 a.m.•21 views

JIZHICMS SQL注入漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology Company. A security vulnerability exists in JIZHICMS version 1.9.5, which is caused by SQL injection and can be exploited by an attacker to run arbitrary SQL...

9.8CVSS8.8AI score0.0085EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/03 12:00 a.m.•4 views

PT-2023-12278

Name of the Vulnerable Software and Affected Versions JIZHICMS version 1.9.5 Description The issue allows attackers to run arbitrary SQL commands via the add or edit article page, potentially leading to unauthorized data access or modification. Recommendations For JIZHICMS version 1.9.5, update t...

9.8CVSS0.0085EPSS
SaveExploits1References4
Mend
Mend
•added 2023/02/03 12:00 a.m.•2 views

CVE-2021-36484

SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page...

9.8CVSS0.0085EPSS
SaveExploits1References1
Rows per page
Query Builder