4227 matches found
Maccms 跨站请求伪造漏洞
Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...
PT-2021-10583
Name of the Vulnerable Software and Affected Versions: Maccms version 8.0 Description: A cross-site request forgery CSRF issue allows attackers to trick administrators into adding and modifying articles without their knowledge by clicking on a crafted URL. Recommendations: For Maccms version 8.0,...
PT-2021-10584
Name of the Vulnerable Software and Affected Versions: Maccms version 8.0 Description: A cross-site scripting XSS vulnerability in the background administrator article management module allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese an...
CVE-2020-19294
A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...
CVE-2020-19294
A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...
CVE-2020-19293
A stored cross-site scripting XSS vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article...
CVE-2020-19293
A stored cross-site scripting XSS vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article...
CVE-2020-19294
A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...
PT-2021-10334
Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the /article/comment component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section. Recommendations: For...
PT-2021-10333
Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue exists in the /article/add component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article. The "article/add" endpoint ...
CVE-2020-19294: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...
CVE-2020-19293: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article...
Jeesns 跨站脚本漏洞
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the article comment section...
Jeesns 跨站脚本漏洞
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in published articles...
Friday Squid Blogging: Squid Communication
Interesting article on squid communication. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69270)
WTCMS is a content management system CMS based on ThinkPHP. wtcms has a cross-site scripting vulnerability in the article source field under the article management module. No detailed vulnerability details are currently available...
WTCMS Cross-Site Scripting Vulnerability (CNVD-2021-69268)
WTCMS is a content management system CMS based on ThinkPHP.A cross-site scripting vulnerability exists in the keyword search function under the backend article module of WTCMS. No detailed vulnerability details are provided at this time...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
