CVE-2022-45541

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...

CVE-2022-45538

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...

PT-2023-14696 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the article type editor component. The issue occurs when the POST value name contains a malformed UTF-8 character. Recommendations: For EyouCMS versions prio...

CVE-2022-45538: Improper Neutralization of Input During Web Page Generation

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...

CVE-2022-45541: Improper Neutralization of Input During Web Page Generation

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...

CVE-2022-45541

CVE-2022-45541 affects EyouCMS

CVE-2022-45540

Summary: CVE-2022-45540 affects EyouCMS versions up to 1.6.0 and is a reflected cross-site scripting (XSS) vulnerability in the article type editor component. The issue arises in the POST parameter name when the value contains a malformed UTF-8 character, enabling potential script injection. The ...

CVE-2022-45537

CVE-2022-45537 affects EyouCMS versions

CVE-2022-45537

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVLISTURL"...

CVE-2022-45538

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...

CVE-2022-45537: Improper Neutralization of Input During Web Page Generation

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVLISTURL"...

CVE-2022-45540: Improper Neutralization of Input During Web Page Generation

EyouCMS = 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char...

PT-2023-14693

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.6.0 Description A reflected-XSS issue was discovered in the article publish component. The issue is related to the cookie ENV GOBACK URL. Recommendations For EyouCMS versions prior to 1.6.0, update to version 1.6.0 ...

PT-2023-14697

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.6.0 Description A reflected-XSS issue was discovered in the article attribute editor component. This occurs when the POST value value contains a non-integer character. Recommendations For EyouCMS versions prior to...

CVE-2022-45541

EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...

WordPress MainWP Article Uploader Extension Plugin <= 4.0.2 is vulnerable to Broken Access Control

Software MainWP Article Uploader Extension Type Plugin Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23742 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID e674bdb18c0f Credits Dave Jong...

Publify 输入验证错误漏洞

Publify is a simple but full-featured web publishing software. versions of Publify prior to 9.2.10 contain an input validation error vulnerability that stems from the fact that it allows the insertion of large characters "title name and post field" into the input field of an article field, allowi...

CVE-2022-46438

A cross-site scripting XSS vulnerability in the /admin/articlecategory.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...

DouCo DouPHP 跨站脚本漏洞

DouCo DouPHP is a lightweight enterprise content management system CMS from China's DouCo Network Technology. A security vulnerability exists in DouCo DouPHP v1.7 20221118, which originates from cross-site scripting in the /admin/articlecategory.php component and allows attackers to execute...

CVE-2023-0243

A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...