Composr CMS 10.0.34 Cross Site Scripting

Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting Date: 3-12-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.34 Tested on: Windows 10/ Kali Linux Steps To Reproduce :- 1. Install the CM...

Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting

Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting Date: 3-12-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.34 Tested on: Windows 10/ Kali Linux Steps To Reproduce :- 1. Install the CM...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

Design/Logic Flaw

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

CVE-2020-8789 : Composr CMS 10.0.30 is vulnerable to a Persistent XSS via a Usergroup name under the Security configuration. The issue arises from insufficient input validation (as described in multiple sources) and is documented across NVD/NVD-derived pages and third-party feeds. No explicit rem...

ocProducts Composr CMS Cross-Site Scripting Vulnerability

ocProducts Composr CMS is the UK ocProducts company's set of open source content management system CMS written in PHP language . A cross-site scripting vulnerability exists in ocProducts Composr CMS version 10.0.30. The vulnerability stems from a lack of proper validation of client-side data by t...

CVE-2020-8789: Improper Neutralization of Input During Web Page Generation

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

PT-2020-20279

Name of the Vulnerable Software and Affected Versions Composr version 10.0.30 Description The issue allows for Persistent XSS via a Usergroup name under the Security configuration. This can be exploited to execute malicious scripts on the affected system. Recommendations For Composr version...

Composr CMS 10.0.30 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting Author: Manuel Garcia Cardenas Vendor: https://compo.sr/ CVE: N/A ============================================= MGC ALERT 2020-001 - Original release date: February 06, 2020 - Last...

Composr CMS 10.0.30 - Persistent Cross-Site Scripting

Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting Author: Manuel Garcia Cardenas Date: 2020-02-06 Vendor: https://compo.sr/ CVE: N/A ============================================= MGC ALERT 2020-001 - Original release date: February 06, 2020 - Last revised: May 21, 2020 - Discovered by:...

Composr CMS 10.0.30 Cross Site Scripting

Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting Author: Manuel Garcia Cardenas Date: 2020-02-06 Vendor: https://compo.sr/ CVE: N/A ============================================= MGC ALERT 2020-001 - Original release date: February 06, 2020 - Last revised: May 21, 2020 - Discovered by:...

Composr CMS Cross-Site Scripting Vulnerability

Composr CMS is an open source content management system CMS developed using HTML, CSS and WCAG technologies. A cross-site scripting vulnerability exists in Composr CMS version 10.0.13. A remote attacker can exploit this vulnerability by sending a page=admin-setupwizard&type=step3 request to...

Design/Logic Flaw

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...

CVE-2018-6518

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...

CVE-2018-6518

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...

CVE-2018-6518

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...