67 matches found
Pixelimity cross-site scripting vulnerability
Pixelimity is an open source PHP-based CMS Content Management System. A security vulnerability exists in Pixelimity 1.0 that originates from cross-site scripting via the site description field in pixelimity/admin/setting.php...
CVE-2022-26246
TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...
CVE-2022-26246
TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...
PT-2022-17739
Name of the Vulnerable Software and Affected Versions TMS version 2.28.0 Description A cross-site scripting XSS issue was found in the /TMS/admin/setting/mail/createorupdate component. Recommendations For TMS version 2.28.0, update to a version that includes a fix for this issue, as no specific...
CVE-2022-26246: Improper Neutralization of Input During Web Page Generation
TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...
CVE-2020-21495
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...
CVE-2020-21496
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...
CVE-2020-21496
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...
CVE-2020-21495
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...
PT-2021-10632
Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: A cross-site scripting XSS issue exists in the /admin/?setting-base.htm component, allowing attackers to execute arbitrary web scripts or HTML via the sitename parameter. Recommendations: For Xiuno BBS...
PT-2021-10633
Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: A cross-site scripting XSS issue exists in the /admin/?setting-base.htm component, allowing attackers to execute arbitrary web scripts or HTML via the sitebrief parameter. Recommendations: For Xiuno BBS...
CVE-2020-21496: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...
CVE-2020-21495: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...
CVE-2021-29056
Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...
Pixelimity Cross-Site Request Forgery Vulnerability
Pixelimity is a PHP-based open source CMS Content Management System. A cross-site request forgery vulnerability exists in Pixelimity version 1.0, which originates from the admin setting.php data Password parameter. No details of the vulnerability are available at this time...
Cross site request forgery (csrf)
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data Password parameter...
CVE-2012-1932
A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...
CVE-2012-1932
A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...
CVE-2012-1932
A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...
PT-2020-7195
Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the settingadmin email parameter to the "admin/setting" endpoint. Recommendations For Wolf CMS...