PT-2018-9818 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the "/index.php?m=tags&f=index&v=add" API endpoint. Recommendations: For WUZHI CMS versi...

WTCMS Cross-Site Request Forgery Vulnerability

WTCMS is a content management system CMS based on Thinkphp. A cross-site request forgery vulnerability exists in WTCMS version 1.0. A remote attacker can exploit this vulnerability to add an administrator account with the help of the index.php?admin&m=user&a=addpost URI...

Cross site request forgery (csrf)

BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/adminadmin.php?nav=listadminuser&adminpnav=user URI...

CVE-2018-10236

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data'name' with no restrictions, and this value is written to the FCPATH.$file file...

CVE-2018-10236

POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data'name' with no restrictions, and this value is written to the FCPATH.$file file...

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

Cross site request forgery (csrf)

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html...

CVE-2018-10224

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via /index.php/admin/tag/add.html...

YzmCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-08781)

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site request forgery vulnerability exists in YzmCMS version 3.8. A remote attacker can add an administrator account with the help of the /index.php/admin/adminmanage/add.html page to explo...

TuziCMS Cross-Site Request Forgery Vulnerability

TuziCMS is an enterprise web content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in TuziCMS version 2.0.6. A remote attacker can exploit the vulnerability to add an administrator account...

Frog CMS Cross-Site Request Forgery Vulnerability

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. In Frog CMS version 0.9.5, a /admin/? /user/add is vulnerable to cross-site request forgery. A remote...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

Design/Logic Flaw

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

CVE-2018-10110

CVE-2018-10110 affects the D-Link DIR-615 T1 router. The vulnerability is a persistent cross-site scripting (XSS) in the web admin, exploitable via the Add User feature in the Admin page. The root cause is inadequate protection of the web page structure allowing an attacker to inject and execute ...

CVE-2018-10110

D-Link DIR-615 T1 devices allow XSS via the Add User feature...

Microsoft Office: Allow Unsecure Apps, Web add-ins and Catalogs

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013allowinsecureappscatalogs.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Allow Unsecure Apps and Catalogs Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Office: Block the Office Store

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013blockofficestore.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block the Office Store Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

Microsoft Office: Suppress external signature services menu item

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013suppressexternalsignaturemenu.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Suppress external signature services menu item Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

XYHCMS Cross-Site Request Forgery Vulnerability

XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in XYHCMS version 3.5. A remote attacker can exploit this vulnerability by sending an index.php?g=Manage&m=Rbac&a=addUser request to add an administrator account...