Sql injection

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

PT-2023-11551

Name of the Vulnerable Software and Affected Versions WUZHICMS version 4.1.0 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php. Recommendations For WUZHICMS version 4.1.0, consider disabling the checktitle functio...

CVE-2020-20413

SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...

CVE-2020-20413

CVE-2020-20413 affects WUZHICMS v4.1.0. A SQL injection in the checktitle() function of admin/content.php enables a remote attacker to execute arbitrary code. The vulnerability is described across multiple security feeds as a high-severity issue (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No...

PT-2021-10432

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1 Description: The issue is related to a SQL injection vulnerability in the checktitle function located in the /coreframe/app/content/admin/content.php file. This vulnerability can be exploited through the API endpoint...

CVE-2021-28088: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...

CVE-2017-11327

An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...

PT-2017-11926

Name of the Vulnerable Software and Affected Versions Tilde CMS version 1.0.1 Description An issue in Tilde CMS allows retrieval of sensitive data through direct references. A low-privileged user can access PHP resources, including admin/content.php and admin/content.php?method=ftp upload...

Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS

The iThemes Security formerly Better WP Security WordPress plugin was affected by an inc/admin/content.php idspecialfile Parameter Stored XSS security vulnerability...

CVE-2012-4263: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/admin/content.php in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTPUSERAGENT header...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearchContentContent parameter...

CVE-2010-4616: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearchContentContent parameter...

PT-2010-5582

Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.2.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the quicksearch ContentContent parameter in the /modules/content/admin/content.php endpoint...