Lucene search
K

10 matches found

EUVD
EUVD
added 2026/01/02 6:44 p.m.3 views

EUVD-2026-0757

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery CSRF. This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This, when combined with stored cross-site...

8.3CVSS6AI score0.00023EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-2599

Malware in sbrugna...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.1 views

jizhicms 安全漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from Extreme Networks Technology, China. A security vulnerability exists in jizhicms version v.2.5.4. A remote attacker could exploit the vulnerability to obtain sensitive information via a specially...

7.3CVSS6.4AI score0.01731EPSS
Exploits2References4
NVD
NVD
added 2018/04/28 4:29 p.m.9 views

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

5.4CVSS5.3AI score0.00206EPSS
Exploits1References1
Prion
Prion
added 2018/04/28 4:29 p.m.15 views

Cross site scripting

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

3.5CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/04/28 4:29 p.m.12 views

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

5.4CVSS5.4AI score0.00206EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/04/28 4:0 p.m.10 views

CVE-2018-10527

EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.htmllistarticle URI...

5.3AI score0.00206EPSS
Exploits1References1
CVE
CVE
added 2018/04/28 4:0 p.m.30 views

CVE-2018-10527

CVE-2018-10527 affects EasyCMS 1.3 and is described as a Stored XSS vulnerability. The issue affects four input fields when posting an article: title, keyword, abstract, and content, as demonstrated by the /admin/index/index.html#listarticle URI. The related documents confirm the existence of the...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/04/26 5:29 a.m.12 views

CVE-2018-10423

mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article...

2.7CVSS4.2AI score
Exploits0References1
CNVD
CNVD
added 2017/05/05 12:0 a.m.1 views

File Upload Bypass Vulnerability in Pivotx CMS Article Posting Page

PivotX CMS is an open source blog content management system Blog CMS. Pivotx CMS 2.3.11 and previous versions of the article publishing page file upload bypass vulnerability , due to fileupload.php file of $disallowedextensions filter array has a design flaw , an attacker can exploit the...

8AI score
Exploits0
Rows per page
Query Builder