585 matches found
CVE-2022-4377
A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack can be launched...
MetInfo 跨站请求伪造漏洞
Metinfo MetInfo is a content management system CMS developed by China's Mito Metinfo using PHP and Mysql. A security vulnerability exists in MetInfo v7.7, which stems from an Administrator List vulnerability that allows an attacker to arbitrarily add a super administrator account via a cross-site...
CVE-2022-45276
An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...
Stored XSS in Compare Mode
A malicious content author could add a Javascript payload to a page's meta description and get it executed in the versioned history compare view. This vulnerability requires access to the CMS to be deployed. The attacker must then convince a privileged user to access the version history for that...
CVE-2022-43689
Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure...
CVE-2022-43695
Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting XSS in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it wa...
CVE-2022-3943 ForU CMS cms_chip.php cross site scripting
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cmschip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...
CVE-2022-3770 Yunjing CMS upload_img.html unrestricted upload
A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/uploadimg.html. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public a...
CVE-2022-36532
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
JFinal SQL注入漏洞
JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/foldernotice/list SQL injection vulnerability...
JFinal SQL注入漏洞
JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/folderrollpicture/list SQL injection vulnerability...
PT-2022-18184 · Sourcecodester · Sourcecodester Company Website Cms
Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS affected versions not specified Description: A critical issue was found in the SourceCodester Company Website CMS, affecting some unknown functionality of the file site-settings.php of the component Cookie...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
FeehiCMS 跨站脚本漏洞
FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version v2.1.1, which originates from a vulnerability that allows attackers to execute arbitrary web script or HTML by injecting a payload into the username field...
Gentics Software Gentics CMS 跨站脚本漏洞
Gentics Software Gentics CMS is a digital publishing and content management system from the Austrian company Gentics Software. A cross-site scripting vulnerability exists in Gentics CMS version 5.36.29. An attacker can exploit this vulnerability to store malicious JavaScript code in user names an...
GHSA-PP4C-2692-7F37 Plone Cross-site Scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2022-30062
ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...