107 matches found
CVE-2021-38708
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS...
CVE-2021-38708
CVE-2021-38708 affects ocProducts Composr CMS prior to 10.0.38. An attacker can trigger a JavaScript injection via Comcode, resulting in a cross-site scripting (XSS) vulnerability. The root cause is improper handling of Comcode input allowing injected script. Documents consistently describe this ...
CVE-2021-38709
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staffmessaging messaging system for XSS...
CVE-2021-38709
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staffmessaging messaging system for XSS...
CVE-2021-38709
The CVE concerns ocProducts Composr CMS prior to 10.0.38, where the staff_messaging system allows JavaScript injection, enabling XSS. Root cause: inadequate input handling in the staff_messaging pathway leading to script injection. Impact (per sources): attacker-supplied script execution in the c...
PT-2021-22270
Name of the Vulnerable Software and Affected Versions ocProducts Composr CMS versions prior to 10.0.38 Description The issue allows an attacker to inject JavaScript via the staff messaging messaging system, resulting in a cross-site scripting XSS attack. This can potentially lead to unauthorized...
CVE-2021-38709: Improper Neutralization of Input During Web Page Generation
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staffmessaging messaging system for XSS...
Ocproducts Composr CMS 跨站脚本漏洞
Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts Ocproducts UK. A security vulnerability exists in ocProducts Composr CMS versions prior to 10.0.38, which can be exploited by attackers to inject JavaScript via Comcode...
Ocproducts Composr CMS 跨站脚本漏洞
Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts UK. A cross-site scripting vulnerability exists in ocProducts Composr CMS versions prior to 10.0.38, which allows an attacker to trigger the vulnerability by injecting JavaScript via the...
PT-2021-22269
Name of the Vulnerable Software and Affected Versions ocProducts Composr CMS versions prior to 10.0.38 Description The issue allows an attacker to inject JavaScript via Comcode, resulting in a cross-site scripting XSS attack. This can potentially lead to unauthorized access or control of user...
CVE-2021-38708: Improper Neutralization of Input During Web Page Generation
In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS...
Composr 10.0.36 - Remote Code Execution
Exploit Title: Composr 10.0.36 - Remote Code Execution Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30149 A RCE on Composr CMS has been discovered by BugsBD...
Composr 10.0.36 Shell Upload
Exploit Title: Composr 10.0.36 - Remote Code Execution Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30149 A RCE on Composr CMS has been discovered by BugsBD...
Composr Cross-Site Scripting Vulnerability
Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A cross-site scripting vulnerability exists in Composr version 10.0.36. The vulnerability can be exploited to conduct cross-site scripting attacks via XML scripts...
Composr PHP File Upload and Execution Vulnerability
Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A PHP file upload and execution vulnerability exists in Composr version 10.0.36. An attacker can exploit this vulnerability to upload and execute PHP files...
Composr CMS 10.0.36 Cross Site Scripting
Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...
Composr 10.0.36 - Remote Code Execution Vulnerability
Exploit Title: Composr 10.0.36 - Remote Code Execution Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30149 A RCE on Composr CMS has been discovered by BugsBD Private LTD. We hav...
Composr CMS 10.0.36 - Cross Site Scripting Vulnerability
Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...
Composr CMS 10.0.36 - Cross Site Scripting
Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30150 Vulnerable Endpoint:...
