Cross site scripting

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2023-46378: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting XSS vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php...

CVE-2022-24677

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

Remote code execution

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

CVE-2022-24677

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

CVE-2022-24677

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

PT-2022-16794

Name of the Vulnerable Software and Affected Versions HYBBS2 versions 2.3.2 and earlier Description The issue allows remote code execution because it writes plugin-related configuration information to conf.php. This is due to a problem in Admin.php. Recommendations For HYBBS2 versions 2.3.2 and...

CVE-2022-24677: Undefined Security Weakness

Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php...

CVE-2014-5085

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro...

CVE-2014-5085

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro...

CVE-2014-5085

CVE-2014-5085 affects Sphider Plus 3.2, where insufficient sanitization of fwrite to conf.php allows a remote attacker to execute arbitrary code. The vulnerability is specific to Sphider Plus and does not exist in Sphider or Sphider Pro. The provided documents do not specify any remediation or pa...

CVE-2014-5086

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist...

PT-2020-7700

Name of the Vulnerable Software and Affected Versions Sphider versions prior to 1.3.6 Description A Command Execution issue exists due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. Recommendations For versions prior to 1.3.6,...

PT-2020-7703

Name of the Vulnerable Software and Affected Versions Sphider Pro version 3.2 Sphider Plus version 3.2 Description A Command Execution issue exists due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. Recommendations For Sphider P...

PT-2020-7702

Name of the Vulnerable Software and Affected Versions Sphider Plus version 3.2 Description A Command Execution issue exists due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. Recommendations For Sphider Plus version 3.2, ensure...

CVE-2014-5083: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 pertains to instances of fwrite in Sphider...

CVE-2014-5085: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro...