PT-2023-11485

Name of the Vulnerable Software and Affected Versions MIPCMS version 3.6.0 Description The issue allows attackers to execute arbitrary code via the category name field in the categoryEdit function. This is a Cross Site Scripting XSS issue, which means attackers can inject malicious scripts into...

CVE-2020-18132

Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...

CVE-2020-18132: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...

CVE-2020-18132

Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...

Betster SQL Injection Vulnerability

Betster aka PHP Betoffice is a suite of software for creating online casinos based on PHP, MySQL and JavaScript. A SQL injection vulnerability exists in Betster version 1.0.4, which stems from the failure of the showprofile.php or categoryedit.php scripts to adequately filter the 'id' parameter;...