SUSE CVE-2013-2637

A Cross-Site Scripting XSS Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code...

SUSE CVE-2017-16854

In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search form to disclose internal article information of their customer tickets...

SUSE CVE-2019-9753

An issue was discovered in Open Ticket Request System OTRS 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ...

PT-2023-9913 · Unknown · Iamdroppy Phoenixcf

Name of the Vulnerable Software and Affected Versions: iamdroppy phoenixcf affected versions not specified Description: A critical vulnerability was found in iamdroppy phoenixcf, affecting an unknown functionality of the file content/2-Community/articles.cfm. The manipulation leads to sql...

LinkedIn: [ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters

Vulnerability description not provided...

WordPress Popular Posts < 6.1.0 - Unauthenticated Views Manipulation

The plugin does not validate some user inputs via a REST endpoint, which could allow unauthenticated users to update the number of views of articles...

GHSA-F454-JM6X-56Q6 Cross-site Scripting in Zenario

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

Cross-site Scripting in Zenario

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

Cross site scripting

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

Zenario CMS 跨站脚本漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system . A cross-site scripting vulnerability exists in Zenario CMS version 9.3.57186, which can be exploited by attackers to conduct cross-site scripting XSS attacks via the News articles module...

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

CVE-2022-44070

Zenario CMS 9.3.57186 contains a Cross-Site Scripting (XSS) vulnerability in the News articles feature. The CVE CVE-2022-44070 affects Zenario CMS 9.3.57186, with XSS via News articles as described across multiple sources. The documentation does not provide an explicit root-cause detail or a conf...

PT-2022-27098 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue is related to Cross Site Scripting XSS via News articles. This means that an attacker could potentially inject malicious scripts into news articles, which could then be executed by users'...

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

phpfusion 授权问题漏洞

PHPFusion is a Malaysian PHPFusion company based on MySql and PHP open source lightweight content management system . The system contains modules for news, articles and forums. A security vulnerability exists in PHPFusion versions prior to 9.10.20, which stems from an unverified password change...

What’s New for Developers: June 2022

Read about our recent Terraform updates and managed database services, our latest Meet the Developer articles, and stream videos on edge computing...

WordPress PDF24 Articles To PDF Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin PDF24 Articles To PDF 4.2.2 and earlier versions are vulnerable to cross-site reques...

WordPress PDF24 Articles To PDF plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress PDF24 Articles To PDF plugin 4.2.2 and earlier versions have a cross-site request forgery...