131 matches found
CVE-2023-49484
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...
CVE-2023-49484
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...
Cross site scripting
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...
CVE-2023-49484
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...
Dreamer CMS 安全漏洞
Dreamer CMS is a dreamer content management system. Dreamer CMS version v4.1.3 suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data in the article management department, which can be exploited by an attacker to execute...
CVE-2023-49484
Dreamer CMS v4.1.3 contains a Cross-Site Scripting (XSS) vulnerability in the article management department. Root cause: lack of effective filtering/escaping of user-supplied data. Impact as per sources: potential execution of arbitrary scripts in or on user browsers. CVSS v3.1 base score 5.4 (Me...
PT-2023-31237 · Unknown · Dreamer Cms
Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.1.3 Description: A cross-site scripting XSS issue was found in the article management department. This could potentially allow attackers to inject malicious scripts into websites, affecting user sessions. Recommendations...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
Sql injection
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
CVE-2022-27341 affects JFinalCMS v2.0 and is a SQL injection vulnerability exploitable via the Article Management function. The base CVSS v2 score is 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and partial impact to confidentiality, integrity, and availability...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
JFinal SQL注入漏洞
JFinal is a Java-based open source framework for WEB + ORM . JFinal CMS v2.0 version of the SQL injection vulnerability , the vulnerability stems from the lack of article management function for SQL data filtering and escaping...
Luocms arbitrary file writing vulnerability
Luocms v2.0 is an article management system. Luocms v2.0 is vulnerable to an arbitrary file-writing vulnerability that results from insufficient validation of filecontent submissions and filenamede filenames, which can be exploited to write arbitrary shell files via /admin/templates/templatemanag...
Luocms SQL Injection Vulnerability (CNVD-2022-20130)
Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/sortok.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...
Luocms SQL Injection Vulnerability (CNVD-2022-20131)
Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/sortmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...
Luocms SQL Injection Vulnerability (CNVD-2022-20132)
Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/newsok.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...
Luocms SQL Injection Vulnerability (CNVD-2022-20136)
Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/link/linkmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...