CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

Emlog 安全漏洞

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

CVE-2023-6762

A vulnerability, which was classified as critical, was found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /article/DelectArticleById/ of the component Article Handler. The manipulation leads to permission issues. It is possible to launch the attack remotely. The exploit ha...

CVE-2023-6762 Thecosy IceCMS Article permission

A vulnerability, which was classified as critical, was found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /article/DelectArticleById/ of the component Article Handler. The manipulation leads to permission issues. It is possible to launch the attack remotely. The exploit ha...

PT-2023-32765 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A critical vulnerability was found in Thecosy IceCMS, affecting an unknown function of the file /article/DelectArticleById/ of the component Article Handler. This issue leads to permission problems an...

IceCMS Authorization Issues Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers. IceCMS 2.0.1 version of the authorization problem vulnerability , the vulnerability stems from the Article Handler component of the /article/DelectArticleById/ there...

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

Dreamer CMS Cross-Site Scripting Vulnerability (CNVD-2023-9769142)

Dreamer CMS is a dreamer content management system. Dreamer CMS version v4.1.3 suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data in the article management department, which can be exploited by an attacker to execute...

2023-12 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5033371)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2023-49484

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

CVE-2023-49484

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

CVE-2023-49484

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

Cross site scripting

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

Dreamer CMS 安全漏洞

Dreamer CMS is a dreamer content management system. Dreamer CMS version v4.1.3 suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data in the article management department, which can be exploited by an attacker to execute...

CVE-2023-49484

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

CVE-2023-49484

Dreamer CMS v4.1.3 contains a Cross-Site Scripting (XSS) vulnerability in the article management department. Root cause: lack of effective filtering/escaping of user-supplied data. Impact as per sources: potential execution of arbitrary scripts in or on user browsers. CVSS v3.1 base score 5.4 (Me...

PT-2023-31237 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.1.3 Description: A cross-site scripting XSS issue was found in the article management department. This could potentially allow attackers to inject malicious scripts into websites, affecting user sessions. Recommendations...

Beers with Talos episode 141: The TurkeyLurkey Man wants YOU to read Talos' Year in Review report

In this episode the Beers with Talos team, led by special guest Dave Liebenberg, set out to save Thanksgiving. The TurkeyLurkey man is the hero that everybody needs, but perhaps dont deserve. For fans and opposers of Daves Ranksgiving list, youll be pleased to know hes back with a whole new order...

October CMS 3.4.0 Wiki Article Cross Site Scripting

OctoberCMS v3.4.0 Wikiarticle Stored Cross-Site Scripting Vulnerability Vendor: October CMS Product web page: https://www.octobercms.com Affected version: 3.4.0 Summary: OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application...

CVE-2023-5640

The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability...