119 matches found
CVE-2026-52307
CVE-2026-52307: Vulnerabilidad XSS Almacenado Autenticado en 1CMS v5.6 Introducción Este repositorio contiene la reproducción de CVE-2026-52307 , una vulnerabilidad de cross-site scripting XSS almacenado autenticado descubierta en 1CMS v5.6 anteriormente ClassCMS. Se proporciona una prueba de...
CVE-2022-25581
CVE-2022-25581 全网都搜不到，留下备份，Python 利用脚本 ，用于自动完成以下步骤： ✅ 脚本功能目标 1. 登录后台（获取 csrf 和 token） 2. 构造恶意请求包上传压缩包（包含 webshell） 3. 访问上传的 webshell 获取控制权限（GET shell） 🧾 前提条件 目标环境：ClassCMS 2.4 Web服务器：PHP 5.5 + MySQL 攻击者拥有一个可访问的 HTTP 服务器（用于托管 shell.zip） 已知后台路径（如 /admin666） 后台账号密码为 admin/admin 🔒 漏洞利用原理回顾...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
EUVD-2026-72956
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
PT-2026-87172
Name of the Vulnerable Software and Affected Versions ClassCMS 1CMS version 5.6 Description An authenticated stored cross-site scripting XSS issue exists in the Column Management component. This allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the...
CVE-2026-52307: Improper Neutralization of Input During Web Page Generation
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
CVE-2026-52307
An authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS 1CMS v5.6 (formerly ClassCMS). The flaw allows an authenticated administrator to inject a crafted payload into the title field on the Article Edit page. When other users view the...
CVE-2026-52307
An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...
EUVD-2024-48971
Malicious code in bioql PyPI...
EUVD-2024-50914
Malicious code in bioql PyPI...
EUVD-2024-48972
Malicious code in bioql PyPI...
EUVD-2024-53530
Malicious code in bioql PyPI...
EUVD-2024-51040
Malicious code in bioql PyPI...
EUVD-2022-30242
Malicious code in bioql PyPI...
EUVD-2022-30243
Malicious code in bioql PyPI...
EUVD-2024-53532
Malicious code in bioql PyPI...
EUVD-2024-47918
Malicious code in bioql PyPI...
CVE-2024-8144
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...