4232 matches found
CVE-2018-13038: Unrestricted Upload of File with Dangerous Type
OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
mao10cms Cross-site Script Injection Vulnerability
mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in mao10cms version 6. Attackers can use the article page to inject arbitrary Web script or HTML...
WordPress Plugin Comments Import & Export < 2.0.4 - CSV Injection
Exploit Title: Wordpress Plugin Comments Import & Export 2.0.4 - CSV Injection Google Dork: N/A Date: 2018-06-24 Exploit Author: Bhushan B. Patil Software Link: https://wordpress.org/plugins/comments-import-export-woocommerce/ Affected Version: 2.0.4 and before Category: Plugins and Extensions...
CVE-2018-12696
mao10cms 6 allows XSS via the article page...
Cross site scripting
mao10cms 6 allows XSS via the article page...
CVE-2018-12696
mao10cms 6 allows XSS via the article page...
CVE-2018-12696
mao10cms 6 is affected by a cross-site scripting (XSS) vulnerability in the article page. The CVE entry for CVE-2018-12696, corroborated by CNVD-2018-12115 and other sources, states that an XSS flaw exists in mao10cms version 6, enabling arbitrary script/HTML injection via the article page. The r...
CVE-2018-12696: Improper Neutralization of Input During Web Page Generation
mao10cms 6 allows XSS via the article page...
PT-2018-11339
Name of the Vulnerable Software and Affected Versions mao10cms version 6 Description The issue allows for XSS via the article page. Recommendations For mao10cms version 6, update to a version that includes a fix for this issue, if available. At the moment, there is no information about a newer...
CVE-2018-12583
An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...
CVE-2018-12583
An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...
CVE-2018-12583
An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...
CVE-2018-12583: Cross-Site Request Forgery (CSRF)
An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php...
PT-2018-11269
Name of the Vulnerable Software and Affected Versions AKCMS version 6.1 Description An issue was discovered that allows CSRF to delete an article via an admincp deleteitem action to "index.php". Recommendations For AKCMS version 6.1, consider implementing CSRF protection measures to prevent...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Security SiteProtector System (CVE-2016-0483 and CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® Java™ Runtime, Version 7 that is used by IBM Security SiteProtector System. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as "SLOTH". Vulnerability Details CVEI...
CVE-2018-12339
ArticleCMS through 2017-02-19 has XSS via an "add an article" action...
Design/Logic Flaw
ArticleCMS through 2017-02-19 has XSS via an "add an article" action...