131 matches found
CVE-2021-46028
In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...
CVE-2021-46028
In mblog = 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted...
CVE-2020-21082
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
CVE-2020-21082
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
Maccms 跨站请求伪造漏洞
Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69270)
WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
Cross site scripting
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
CVE-2020-20347
Affected software: WTCMS 1.0. Vulnerability type & location: stored cross-site scripting (XSS) in the article management module, in the source field. Root cause (as stated): input is stored and later displayed without proper sanitization. Impact implied by description: script payload could be exe...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
WTCMS 跨站脚本漏洞
WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...
File Upload Vulnerability in the Article Management System of FastPlace CMS
Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FMS article management system file upload vulnerability, an attacker can exploit the vulnerability to obtain control of the web server...
XSS vulnerability in old y article management system
The old y article management system is based on the old y Asp Access/Mssql environment developed under the open source website building products . Old y article management system XSS vulnerability , attackers can use the vulnerability to obtain administrator cookie information , and further use t...
Code Execution Vulnerability in Online Titanium Article Management System (OTCMS)
Nettitanium technology is committed to article management system, article news CMS, webmaster tools class of research and development, Nettitanium article management system station adopts mainstream DIV + CSS framework layout, applicable to the news release type of website, but also applies to...
File Upload Vulnerability in Jfinal cms Backend Article Management System
Jfinal cms, using a simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms back-end article management system file upload vulnerability , its back-end article management system file upload...
Sql injection
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
CVE-2018-17420
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
CVE-2018-17420
Summary: CVE-2018-17420 affects ZrLog 2.0.3 with a SQL injection in the article management search box via the keywords parameter. The vulnerability is demonstrated in the NVD entry (CVSS v3 base 7.2, HIGH; vectors: NETWORK/LOW for exploitability, requires HIGH privileges, no user interaction). Th...