CVE-2020-29474

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

CVE-2020-29474

CVE-2020-29474 affects EGavilan Media EGM Address Book 1.0. A SQL injection vulnerability allows an attacker to gain Admin Panel access and perform remote arbitrary code execution. Publicly available exploits (e.g., Exploit-DB) exist per references in the records.

CVE-2020-29247

WonderCMS 3.1.3 is affected by cross-site scripting XSS in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload...

CVE-2020-29247

WonderCMS 3.1.3 is affected by a cross-site scripting (XSS) vulnerability in the Admin Panel. The issue allows an attacker to inject an XSS payload via Page keywords, which triggers for each user visit and can enable cookie theft. The vulnerability is documented across multiple sources (NVD, Red ...

WonderCMS 跨站脚本漏洞

WonderCMS is an open source, fast, small and simple flat file cms. A cross-site scripting vulnerability exists in the "Admin Panel" of WonderCMS 3.1.3. The vulnerability can be exploited to steal cookies via page keywords...

Egavilan Media EGM Address Book SQL注入漏洞

Egavilan Media EGM Address Book is a platform for managing contact information address book organized by Egavilan Media in the United States. A SQL injection vulnerability exists in EGavilan Media EGM Address Book version 1.0, which can be exploited by an attacker to gain access to the admin pane...

CVE-2020-35252

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

CVE-2020-35252

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

Cross site scripting

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

CVE-2020-35252

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

CVE-2020-35252

The CVE-2020-35252 entry describes a Cross-Site Scripting (XSS) vulnerability in the Full Name parameter of the User Registration & Login System with Admin Panel 1.0. Connected sources indicate the root cause as insufficient input validation/filtering for the Full Name field, enabling script exec...

Egavilanmedia User Registration & Login System 跨站脚本漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability stems from the full name paramet...

CVE-2020-35274

DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...

Cross site scripting

DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting XSS to gain remote privileges. An attacker could compromise the security of a website or web application through a stored XSS attack and stealing cookies using XSS...

CVE-2020-35274

DotCMS Add Template with admin panel 20.11 is affected by stored XSS that could let an attacker gain remote privileges and potentially steal cookies. The vulnerability is described as stored XSS in the admin template functionality, enabling a compromise of a website or web application through XSS...

DotCMS Add Template with admin panel Cross-site Scripting Vulnerability

Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports modules such as RSS feeds, blogs, and forums, and is easy to extend and build. DotCMS Add Template with admin panel 20.11 suffers from a cross-site scripting vulnerability that allows...

Egavilanmedia User Registration & Login System 跨站请求伪造漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

Academy-LMS 4.3 - Stored XSS

Exploit Title: Academy-LMS 4.3 - Stored XSS Date: 19/12/2020 Vendor page: https://academy-lms.com/ Version: 4.3 Tested on Win10 and Google Chrome Exploit Author: Vinicius Alves XSS Payload: 1 Access LMS and log in to admin panel 2 Access courses page 3 Open course manager and SEO menu 4 Paste the...

Product update: Virtuozzo Hybrid Infrastructure 4.0 Update 1

This update provides a new feature, as well as bug fixes and improvements. Vulnerability id: VSTOR-38583 A non-admin user is unable to create volumes from the command line. Vulnerability id: VSTOR-38785 Enabled geo-replication on Backup Gateway with an S3 backend may result in a deadlock...