99 matches found
EUVD-2024-48972
Malicious code in bioql PyPI...
EUVD-2022-30243
Malicious code in bioql PyPI...
EUVD-2022-30242
Malicious code in bioql PyPI...
EUVD-2024-51040
Malicious code in bioql PyPI...
EUVD-2024-53532
Malicious code in bioql PyPI...
EUVD-2024-47918
Malicious code in bioql PyPI...
EUVD-2024-50914
Malicious code in bioql PyPI...
EUVD-2024-53530
Malicious code in bioql PyPI...
EUVD-2024-48971
Malicious code in bioql PyPI...
CVE-2024-8144
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Logo Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...
CVE-2024-8145
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8. Affected by this issue is some unknown functionality of the file /index.php/admin of the component Article Handler. The manipulation of the argument Title leads to basic cross site scripting. The attack may be...
CVE-2024-48180
ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...
CVE-2024-12503
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched...
CVE-2024-6932
A vulnerability was found in ClassCMS 4.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/?action=home=shop:index==all. The manipulation of the argument order leads to cross site scripting. The attack can be launched remotely. Th...
CVE-2024-12666
A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The...
CVE-2022-45966
here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5...
CVE-2022-25582
A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...
CVE-2022-25581
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...
CVE-2024-57099
ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server...
CVE-2024-57097
ClassCMS 4.8 is vulnerable to Cross Site Scripting XSS in class/admin/channel.php...