8146 matches found
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
CMSeeK
CMS란? 콘텐츠 관리 시스템CMS은 디지털 콘텐츠의 생성과 수정을 관리합니다. 일반적으로 여러 사용자가 협업 환경에서 사용할 수 있도록 지원합니다. 주목할 만한 예로는 WordPress, Joomla, Drupal 등이 있습니다. 릴리스 기록 root@kitploit: - Version 1.1.3 25-07-2020 - Version 1.1.2 19-05-2019 - Version 1.1.1 01-02-2019 - Version 1.1.0 28-08-2018 - Version 1.0.9 21-08-2018 - Version...
petereport
PeTeReport PeTeReport Pe nTe st Report는 침투 테스트/레드팀 활동을 지원하기 위해 설계된 오픈소스 애플리케이션 취약점 보고 도구로, 보고서 작성 및 생성을 간소화합니다. 제품 보안에 중점을 두고, 이 도구는 보안 연구자와 침투 테스터가 세부적인 발견 사항, 부록, 공격 경로를 제공하고 발견 사항 템플릿 데이터베이스를 관리하여 보고 단계에서 소요되는 시간을 절약할 수 있도록 도와줍니다. PeTeReport Pe nTe st Report는 Django와 Python 3로 작성되었으며, 침투 테스터와 ...
CVE-2023-23752
CVE-2023-23752 Joomla 未認可アクセス脆弱性 CVE-2023-23752 脆弱性説明 Joomlaは、PHPで記述されたオープンソースのコンテンツ管理システム（CMS）であり、MySQL、MSSQL、PostgreSQLなどの複数のデータベースシステムをサポートしています。アクセス制限の不備により、認可されていないアクセスがサーバーREST APIインターフェースに可能となります。 影響を受けるバージョン：Joomla 4.0.0 - 4.2.7 使用ヘルプ root@kitploit: optional arguments: -h, --help show thi...
pywhatcms
PyWhatCMS whatcms.com API용 Python 패키지 이 패키지는 whatcms.org API를 사용하여 467가지 다양한 콘텐츠 관리 시스템CMS을 탐지하는 간단한 방법을 제공합니다. 설치 root@kitploit: pip install pywhatcms 사용법 먼저 pywhatcms를 임포트합니다: root@kitploit: from pywhatcms import whatcms 도메인을 쿼리합니다: root@kitploit: whatcms'API-KEY', 'blog.underc0de.org' 정보를 얻습니다...
CMS_Detector
CMSDetector Python2 寄付 : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...
Masa CMS - Authentication Bypass
Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Page content. id: CVE-2022-42095 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...
PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection
PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...
u5cms v8.3.5 - Open Redirect
u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. id: CVE-2022-32444 info: name: u5cms v8.3.5 - Open Redirect author: 0xAkoko severity: medium description: | u5cms version 8.3.5 contains a URL...
cve-2023-41564-research
Resumen de la vulnerabilidad CVE-2023-41564 CVE-2023-415641 es una vulnerabilidad de XSS almacenado presente en el CMS Cockpit = v2.6.3. Al cargar un archivo HTML con extensión .shtml durante la subida de archivos, el JavaScript se ejecuta en el momento en que se abre el archivo subido. 1:...
CVE-2026-6184-stored-XSS
ニュースタイトルにおける格納型XSS - Simple Content Management System PHP 説明 Simple Content Management System PHPには、格納型クロスサイトスクリプティング（XSS）の脆弱性が存在します。管理パネルのニュースタイトルフィールドは、データベースに保存して公開インデックスページに反映する前にユーザー入力をサニタイズしません。メインページを閲覧する訪問者は誰でも格納型XSSペイロードをトリガーし、攻撃者がセッションクッキーを盗み、アカウントを乗っ取ることが可能になります。 脆弱性の詳細 タイプ:...
CVE-2026-6182-SQLI-auth
SQLインジェクション認証バイパス - Simple Content Management System PHP 説明 Simple Content Management System PHPの管理ログインページにSQLインジェクションの脆弱性が存在します。userパラメータはSQLクエリに渡される前にサニタイズされていないため、認証されていない攻撃者が認証をバイパスして完全な管理者アクセスを取得できます。 脆弱性の詳細 種類: SQLインジェクション CWE-89 影響: 認証バイパスにより完全な管理者アクセスを取得 影響を受けるファイル: /web/admin/login.php...
EUVD-2026-80048
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...
CVE-2026-92257
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...
CVE-2026-92257 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...
CVE-2026-92257
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in its L7 content management pages, specifically in the call board text and policy group handling components, which use eval() sinks to process input. Attackers with low privileges can inject persistent script...
Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs
Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...