CVE-2018-19547

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...

CVE-2018-19547

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...

JTBC(PHP) Cross-Site Scripting Vulnerability

JTBC PHP is an open source CMS Content Management System. A cross-site scripting vulnerability exists in JTBC PHP version 3.0.1.7. A remote attacker can exploit the vulnerability by sending the 'content' parameter to console/xml/manage.php?type=action&action=edit URL to inject arbitrary Web scrip...

PT-2018-14991

Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue concerns a CSRF vulnerability that can be exploited via the "console/xml/manage.php?type=action&action=edit" URI. It is demonstrated by an XSS payload in the content parameter. Recommendations For...

CVE-2018-19547: Improper Neutralization of Input During Web Page Generation

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...

PT-2018-14992

Name of the Vulnerable Software and Affected Versions JTBCPHP version 3.0.1.7 Description The issue is related to a cross-site scripting XSS problem. It occurs via the "console/xml/manage.php" API endpoint, specifically when the type parameter is set to "action" and the action parameter is set to...

CVE-2018-19546: Improper Neutralization of Input During Web Page Generation

JTBCPHP 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter...

Surreal ToDo 0.6.1.2 - Local File Inclusion

Surreal ToDo 0.6.1.2 - Local File Inclusion Exploit Title: Surreal ToDo 0.6.1.2 - Local File Inclusion Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://getsurreal.com/surrealtodo Software Link:...

Cross site request forgery (csrf)

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

SeaCMS cross-site scripting vulnerability (CNVD-2018-19071)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.61, which can be exploited by remote attackers to...

OpenEMR Directory Traversal Vulnerability

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by remote attackers to execute arbitrary PHP code via the "doci...

rejucms cross-site scripting vulnerability

rejucms is an online video web content management system CMS. A cross-site scripting vulnerability exists in rejucms version 2.1. A remote attacker can inject arbitrary web script or HTML by sending the 'content' parameter to the admin/book.php URL...

Cross site scripting

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838

CVE-2018-14838 affects rejucms 2.1 and is a stored XSS vulnerability in the admin/book.php content parameter. The issue allows injection of script/HTML through that parameter, leading to potential script execution in the context of the affected CMS. No explicit mitigation or patch details are pro...

CVE-2018-14838

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14838: Improper Neutralization of Input During Web Page Generation

rejucms 2.1 has stored XSS via the admin/book.php content parameter...

CVE-2018-14513

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formcontent parameter to the index.php?m=feedback&f=index&v=contact URI...