87 matches found
CVE-2022-38272
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...
CVE-2022-38273: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...
CVE-2022-38272: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...
JFinal SQL Injection Vulnerability
JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/article/list SQL injection vulnerability...
Bluecms has an unspecified vulnerability (CNVD-2022-59209)
BlueCMS is a PHP and MySQL based content management system CMS. a security vulnerability exists in BlueCMS version 1.6, which stems from an SQL injection in line 132 of admin/article.php. No detailed vulnerability details are available at this time...
CVE-2022-37111
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...
CVE-2022-37111
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...
CVE-2022-37111
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...
BlueCMS SQL Injection Vulnerability
BlueCMS is a PHP and MySQL based content management system CMS. a security vulnerability exists in BlueCMS version 1.6, which stems from an SQL injection in line 132 of admin/article.php. No detailed vulnerability details are available at this time...
CVE-2021-40961
CMS Made Simple =2.2.15 is affected by SQL injection in modules/News/function.adminarticlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '...
CMS Made Simple SQL Injection Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based permission management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple version...
CVE-2020-21081
A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...
CVE-2020-23374: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter...
NoneCMS Cross-Site Scripting Vulnerability
NoneCMS is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. A cross-site scripting vulnerability exists in admin/article/add.html in NoneCMS version 1.3.0. Attackers can use the name parameter to inje...
PT-2021-10894
Name of the Vulnerable Software and Affected Versions noneCMS version 1.3.0 Description A cross-site scripting XSS issue allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter in the admin/article/add.html page. Recommendations For noneCMS version 1.3....
CVE-2020-10400
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/article-collaboration.php by adding a question mark ? followed by the payload...
CVE-2020-10400
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/article-collaboration.php by adding a question mark ? followed by the payload...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/article-collaboration.php by adding a question mark ? followed by the payload...
CVE-2020-10400: Improper Neutralization of Input During Web Page Generation
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/article-collaboration.php by adding a question mark ? followed by the payload...