Lucene search
+L

384 matches found

CNNVD
CNNVD
•added 2022/11/21 12:00 a.m.•19 views

Backdrop CMS 跨站脚本漏洞

Backdrop CMS is an open source content management system CMS. A security vulnerability exists in Backdrop CMS version 1.23.0, which stems from stored cross-site scripting in its Post component...

4.8CVSS4.9AI score0.02094EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/11/21 12:00 a.m.•7 views

CVE-2022-42096

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content...

4.9AI score0.02094EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/11/21 12:00 a.m.•65 views

CVE-2022-42096

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content...

5.2AI score0.02094EPSS
SaveExploits1References4
CVE
CVE
•added 2022/11/21 12:00 a.m.•130 views

CVE-2022-42096

Backdrop CMS 1.23.0 contains a stored XSS in Post content. Exploitation requires authenticated content-creation/administrative privileges (per sources). An attacker can inject malicious JavaScript that may be executed when posts are viewed, potentially compromising administrator sessions. Remedia...

4.8CVSS4.8AI score0.02094EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2022/11/21 12:00 a.m.•1 views

CVE-2022-42096

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content...

4.8CVSS0.02094EPSS
SaveExploits1References6
OSV
OSV
•added 2022/11/21 12:00 a.m.•39 views

CVE-2022-42096

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content...

4.8CVSS5AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/21 12:00 a.m.•3 views

CVE-2022-42096: Improper Neutralization of Input During Web Page Generation

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content...

4.8CVSS5.6AI score0.02094EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2022/11/03 12:00 a.m.•47 views

Oracle Linux 7 : pcs (ELSA-2022-7343)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7343 advisory. 0.9.169-3.0.1 - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png 0.9.169-3.el73.2 - Update rubygem rack - Upgrade jquery i...

10CVSS7AI score0.8682EPSS
SaveExploits4References3
OSV
OSV
•added 2022/10/07 6:15 p.m.•33 views

GHSA-33C9-RPPF-M7FQ Backdrop CMS Unrestricted File Upload vulnerability

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via themes that allows attackers to achieve Remote Code Execution...

7.2CVSS7.2AI score0.02044EPSS
SaveExploits2References3
Github Security Blog
Github Security Blog
•added 2022/10/07 6:15 p.m.•42 views

Backdrop CMS Unrestricted File Upload vulnerability

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via themes that allows attackers to achieve Remote Code Execution...

7.2CVSS7AI score0.02044EPSS
SaveExploits2References3Affected Software1
attackerkb
attackerkb
•added 2022/10/07 6:15 p.m.•11 views

CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

7.2CVSS5.9AI score0.02044EPSS
SaveExploits2References2
NVD
NVD
•added 2022/10/07 6:15 p.m.•34 views

CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

7.2CVSS0.02044EPSS
SaveExploits2References1
Prion
Prion
•added 2022/10/07 6:15 p.m.•21 views

Unrestricted file upload

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution...

5.8CVSS7AI score0.02044EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2022/10/07 12:00 a.m.•19 views

Backdrop CMS 代码问题漏洞

Backdrop CMS is an open source content management system CMS. A code issue vulnerability exists in Backdrop CMS version 1.22.0, which stems from themes having an unrestricted file upload vulnerability that can be exploited by an attacker to remotely execute code...

7.2CVSS7.2AI score0.02044EPSS
SaveExploits2References2
OSV
OSV
•added 2022/10/07 12:00 a.m.•24 views

CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

7.2AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/10/07 12:00 a.m.•36 views

CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

7.4AI score0.02044EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•14 views

PT-2022-26247 · Unknown · Backdrop Cms

Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.22.0 Description: The issue allows attackers to achieve Remote Code Execution via themes due to an Unrestricted File Upload vulnerability. Note that there is a dispute from third parties, arguing that advanced permissio...

7.2CVSS7.6AI score0.02044EPSS
SaveExploits2References6
CVE
CVE
•added 2022/10/07 12:00 a.m.•120 views

CVE-2022-42092

Backdrop CMS 1.22.0 is affected by an Unrestricted File Upload vulnerability via the themes component that can lead to Remote Code Execution. The issue is documented across multiple sources as susceptible to exploitation, with third-party notes arguing that advanced permissions may be required. A...

7.2CVSS7.2AI score0.02044EPSS
SaveExploits2References1Affected Software1
Mend
Mend
•added 2022/10/07 12:00 a.m.•0 views

CVE-2022-42092

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

8.6CVSS0.02044EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•2 views

CVE-2022-42092: Unrestricted Upload of File with Dangerous Type

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required...

7.2CVSS7.2AI score0.02044EPSS
SaveExploits2References2
Rows per page
Query Builder