CVE-2018-18733

An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999...

CVE-2018-18734

CVE-2018-18734 describes a Cross-Site Request Forgery (CSRF) in Catfish CMS 4.8.30, specifically in the admin/Index/addmanageuser.html page. The issue allows unauthorized actions (adding users) via CSRF. Connected sources confirm the vulnerable component and page in Catfish CMS 4.8.30 and indicat...

Catfish CMS Cross-Site Scripting Vulnerability (CNVD-2018-13273)

Catfish CMS is an open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in Catfish CMS version 4.7.9. A remote attacker can inject arbitrary web script or HTML by sending the 'editorValue' parameter to the admin/Index/write.html page...

CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

Design/Logic Flaw

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-13999

Catfish CMS v4.7.9 is vulnerable to cross-site scripting via the admin/Index/write.html editorValue parameter (an administrator-posted article). The CVE-2018-13999 entry documents this XSS flaw; related entries note a similar issue in Catfish CMS 4.8.30. The provided documents do not specify a pa...

CVE-2018-13999

Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter aka an article posted by an administrator...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

Cross site scripting

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

CVE-2018-10023

Catfish CMS version 4.7.21 is reported to be vulnerable to a cross-site scripting (XSS) issue in the pinglun parameter of the path cat/index/index/pinglun (an authenticated comment). All connected sources (Red Hat, CNVD, CNVD CNVD-2018-08759, NVD, CVE records) corroborate that this XSS affects Ca...

CVE-2018-10023

Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun aka an authenticated comment...

Catfishcms_v4.7.18后台存储型XSS漏洞

一、漏洞简要概述： Catfish鲶鱼 CMS是一款开源的PHP内容管理系统，适合于CMS、Blog、企业站等不同类型的网站建设。 自动识别CMS、Blog 等网站类型，只要简单的切换主题就可以完成网站类型的切换。 多语言支持，包括简体中文、繁体中文、俄语、德语、法语、韩语、日语、英语各种语言。 全站自适应设计，适用于pc，手机等不同大小屏幕的终端显示，支持手机、微信等小屏幕访问。 在4.7.18版本中，该CMS后台默认自带一个插件，此插件因代码开发不严格，导致存在XSS漏洞。若用户启用该插件，将会造成危害。 二、漏洞演示...

Catfish CMS suffers from cross-site scripting vulnerability

Catfish Catfish CMS is an open source PHP content management system. A cross-site scripting vulnerability exists in Catfish CMS. An attacker can exploit this vulnerability to obtain cookie information about other users and administrators...

Logic Design Vulnerability in Catfish CMS/Blog System Logins

Catfish catfish CMS is open source PHP content management system. A logical design vulnerability exists in the Catfish CMS/Blog system login. Allow attackers to exploit the vulnerability to bypass the CAPTCHA authentication and carry out unlimited blasting attacks on the system...

Catfish CMS controller/Common.php page has a stored cross-site scripting vulnerability

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS controller/Common.php page. An attacker can insert malicious js code to obtain user cookies and other information, resulting in user hijacking...

Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend

Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...

Catfish CMS is vulnerable to XSS

Catfish Catfish CMS is an open source PHP CMS web content management system. catfish cms there is an XSS vulnerability, the reason for this vulnerability is not filtered user-submitted data due to the attacker can exploit the vulnerability to implant cross-site code to obtain sensitive informatio...

Catfish CMS Has Arbitrary File Deletion Vulnerability

Catfish catfish CMS is open source PHP content management system. An arbitrary file deletion vulnerability exists in the Catfish CMS/application/user/controller/Index.php page. Allows an attacker to exploit the vulnerability to delete arbitrary files, resulting in a reinstallation...