8132 matches found
CVE-2023-23752
CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...
CMSeeK
What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History root@kitploit:...
EUVD-2026-54577
Kirby: System path exposure from error messages in the REST API...
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Masa CMS - Authentication Bypass
Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
u5cms v8.3.5 - Open Redirect
u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. id: CVE-2022-32444 info: name: u5cms v8.3.5 - Open Redirect author: 0xAkoko severity: medium description: | u5cms version 8.3.5 contains a URL...
Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Page content. id: CVE-2022-42095 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...
pywhatcms
PyWhatCMS Python package for whatcms.com API The package provides a simple way to use the whatcms.org API for detecting 467 different Content Management Systems CMS Installation root@kitploit: pip install pywhatcms Usage First of all, import pywhatcms: root@kitploit: from pywhatcms import whatcms...
cve-2023-41564-research
CVE-2023-41564 Vulnerability Overview CVE-2023-415641 is a stored XSS vulnerability in the CMS Cockpit = v2.6.3. When a .shtml HTML file is uploaded during file upload, JavaScript is executed the moment the uploaded file is opened. 1: https://nvd.nist.gov/vuln/detail/CVE-2023-41564 Attack Executi...
PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection
PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...
CMS_Detector
CMSDetector Python2 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
CVE-2026-54721
Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...
CVE-2026-6184-stored-XSS
XSS Memorizzato nel Titolo delle Notizie - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di Cross-Site Scripting XSS Memorizzato in Simple Content Management System PHP. Il campo Titolo delle Notizie nel pannello di amministrazione non sanifica l'input dell'utente prim...
CVE-2026-6182-SQLI-auth
Bypass dell'Autenticazione tramite SQL Injection - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di SQL Injection nella pagina di login dell'amministratore di Simple Content Management System PHP. Il parametro user non viene sanitizzato prima di essere passato alla que...
CVE-2026-39275
Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before...
petereport
PeTeReport PeTeReport Pe nTe st Report é uma ferramenta de relatório de vulnerabilidades de aplicações de código aberto projetada para auxiliar esforços de pentest/redteam, simplificando a tarefa de escrever e gerar relatórios. Focada na segurança de produtos, a ferramenta ajuda pesquisadores de...
EUVD-2026-41147
Wagtail: Improper restriction handling on Documents and Images chosen endpoints...
CVE-2026-59992
creationtimestamp| type| source ---|---|--- 2026-08-19 22:35:05+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-8mq9-5fw2-5rm4...
EUVD-2026-55624
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...
