EUVD-2024-16517

Malicious code in bioql PyPI...

CVE-2024-0728

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-57097

ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...

CVE-2024-57097

ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...

CVE-2024-57097

ClassCMS version 4.8 is vulnerable to Cross-Site Scripting (XSS) within the class/admin/channel.php file. This vulnerability allows for potential malicious script injection due to the improper neutralization of input during web page generation. As a temporary workaround until a patch is available...

CVE-2024-57097: Improper Neutralization of Input During Web Page Generation

ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...

CVE-2024-0728

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-0728 ForU CMS channel.php file inclusion

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-0728

ForU CMS (up to 2020-06-23) contains a file inclusion vulnerability in channel.php triggered by manipulating the c_cmodel parameter. This affects an unknown functionality within channel.php and can be exploited remotely; the exploit has been disclosed publicly (VDB-251551). Several sources (NVD, ...

ForU CMS Security Vulnerability

ForU CMS is a website builder system by ForU open source. A security vulnerability exists in ForU CMS version 2020-06-23 and earlier, which stems from the parameter ccmodel in the file channel.php that causes the file to contain...

PT-2024-15785 · Foru Cms · Foru Cms

Name of the Vulnerable Software and Affected Versions: ForU CMS versions up to 2020-06-23 Description: A problematic issue was found in ForU CMS, affecting an unknown functionality of the file channel.php. The manipulation of the c cmodel argument leads to file inclusion. This issue can be...

CVE-2024-0728: External Control of File Name or Path

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2018-8057: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channelname or platform parameter in a /index.php?/manage/channel/addchannel request, related to /application/controllers/manage/channel.php...

PT-2018-18195

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 4.0.0 Release 4902 Description An issue exists where SQL injection vulnerabilities are present in several parameters. The affected parameters include the channelId parameter in the "actions/vote channel.php"...

mvtv.co.th XSS vulnerability

Vulnerable URL: http://www.mvtv.co.th/channel.php?m=...

PT-2014-2410

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the type parameter to "view channel.php" API endpoint. Recommendations For ClipBucket version 2.6, consider...

CVE-2014-1906: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...