3697 matches found
PT-2024-31274 · Rapidcms · Rapidcms
Name of the Vulnerable Software and Affected Versions: RapidCMS version 1.3.1 Description: A SQL injection issue was discovered via the articleid parameter at the "/default/article.php" API endpoint. This allows for potential exploitation. Recommendations: For RapidCMS version 1.3.1, consider...
Storefront - The default TraceLevel of StoreFront diagnostics logs
This article describes the default TraceLevel of StoreFront diagnostics logs...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2024-8145 ClassCMS Article admin cross site scripting
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2024-8145 ClassCMS Article admin cross site scripting
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
PT-2024-38834 · Classcms · Classcms
Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.8 Description: A vulnerability has been found in ClassCMS, affecting some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the Title argument leads to basic cross-site...
CVE-2024-7733
A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-7733 FastCMS New Article Category Page cross site scripting
A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-7733 FastCMS New Article Category Page cross site scripting
A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
2024-08 Cumulative Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5041160)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
2024-08 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5041580)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2024-08 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5041773)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
PT-2024-38541 · Fastcms · Fastcms
Name of the Vulnerable Software and Affected Versions: FastCMS versions up to 0.1.5 Description: A vulnerability was found in the New Article Category Page component of FastCMS, affecting an unknown function. This issue leads to cross-site scripting and can be exploited remotely. The exploit has...
CVE-2024-41614
symphonycms =2.7.10 is vulnerable to Cross Site Scripting XSS in the Comment component for articles...
Exploit for Path Traversal in Stitionai Devika
CVE-2024-40422 Found this on exploit-db, decided to make my ow...
Desdev DedeCMS 安全漏洞
DedeCMS is a popular content management system widely used to create and manage website content for a variety of application scenarios such as corporate websites and personal blogs. A code injection vulnerability exists in the articletemplaterand.php file in DedeCMS version 5.7.114. The...
PT-2024-37978 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.114 Description: A critical issue has been found in DedeCMS, affecting an unknown part of the file article template rand.php. This issue leads to code injection and can be initiated remotely. The exploit has been disclosed...
Malicious code in sap-article (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d56eeb9b4a26f6103695bcaa3f5641cf0ecfcdb6c599bd9ad4c0ea8cf0812af The OpenSSF Package Analysis project identified 'sap-article' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2024-39174
A cross-site scripting XSS vulnerability in the Publish Article function of yzmcms v7.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a published article...