Lucene search
K

6 matches found

OSV
OSV
added 2025/05/06 4:16 a.m.1 views

CVE-2025-4310

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/addtopic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely...

6.3CVSS5.5AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/05/06 3:31 a.m.9 views

CVE-2025-4310 itsourcecode Content Management System add_topic.php unrestricted upload

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/addtopic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely...

5.8CVSS4.9AI score0.0019EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.1 views

itsourcecode Content Management System 安全漏洞

itsourcecode Content Management System is an open source content management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which originates from an improper operation of the parameter Cover Image in the file /admin/addtopic.php,...

6.3CVSS5AI score0.0019EPSS
Exploits1References5
CNVD
CNVD
added 2019/12/17 12:0 a.m.1 views

Empire cms add topic at the existence of SQL injection vulnerability

Empire CMS is a content management system CMS. A SQL injection vulnerability exists in Empire cms at Add Topic. An attacker can exploit the vulnerability to obtain sensitive database information...

7.9AI score
Exploits0
NVD
NVD
added 2014/02/07 3:48 p.m.16 views

CVE-2014-1914

Multiple cross-site scripting XSS vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arbitrary web script or HTML via the 1 topic parameter to sw/addtopic.php or 2 nick parameter to sw/chat/message.php...

4.3CVSS5.7AI score0.0048EPSS
Exploits1References6
Cvelist
Cvelist
added 2014/02/07 3:0 p.m.22 views

CVE-2014-1914

Multiple cross-site scripting XSS vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arbitrary web script or HTML via the 1 topic parameter to sw/addtopic.php or 2 nick parameter to sw/chat/message.php...

5.7AI score0.0048EPSS
Exploits1References6
Rows per page
Query Builder