CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

CVE-2017-15947

CVE-2017-15947 affects Simple ASC CMS 1.2, with an XSS vulnerability in the location field of the sign function, involving guestbook.asp, formgb.asp, and msggb.asp. The issue is documented across multiple sources (NVD and national bulletins) with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base s...

APPCMS version 2.0.101 has malicious backdoor

APPCMS is a professional APP content management system. There is a malicious backdoor in appcms version 2.0.101, through which an attacker can obtain the webmaster login information...

SQL Injection Vulnerability in APPCMS index.php File

APPCMS is a professional APP content management system. A SQL injection vulnerability exists in the index.php file of APPCMS version 1.3.855. An attacker can exploit this vulnerability to obtain sensitive database information or perform unauthorized operations...

Cross site scripting

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware 5.2.5–5.3 contains a persistent cross-site scripting (XSS) vulnerability in the backend CMS modules for customer and order handling. The flaw allows injection of script into firstname/lastname/order fields, triggering execution in the admin backend preview of customers or orders. Exploit...

Plone Design Vulnerability

Plone is the U.S. Plone Foundation's set of free and open source content management system CMS built on an application server Zope. The system is developed in Python language , suitable for web portals , internal and external corporate websites , document publishing systems and so on. A design...

ZCMS JavaServer Pages Content Management System Cross-Site Scripting Vulnerability

ZCMS JavaServer Pages Content Management System is a page content management system . A cross-site scripting vulnerability exists in ZCMS JavaServer Pages Content Management System version 1.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Joomla 3.7.5 LDAP Injection Vulnerability

Exploit for php platform in category web applications With over 84 million downloads, Joomla! is one of the most popular content management systems in the World Wide Web. It powers about 3.3% of all websites’ content and articles. Our code analysis solution RIPS detected a previously unknown LDAP...

CVE-2015-7347

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

Cross site scripting

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

CVE-2015-7347

CVE-2015-7347 affects ZCMS 1.1 JavaServer Pages Content Management System. The connected sources confirm a cross-site scripting (XSS) vulnerability in ZCMS 1.1 (no detailed root cause in the provided docs). Public exploit references exist (Exploit-DB and PacketStorm) describing XSS and SQL Inject...

CVE-2015-7347

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

SQL Injection Vulnerability in State Micro CMS Station Messages

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in State Micro CMS site messages. The vulnerability is due to the failure of the system to effectively...

Cross-site scripting vulnerability in S-CMS /admin/help.asp page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A cross-site scripting vulnerability exists in the /admin/help.asp page in S-CMS v3.0 build20170911. Allows an attacker to construct XSS statements and perform pop-up box operations to obtain sensitive...

CVE-2017-1002002

Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/...

74cms content management system backend existence of arbitrary file deletion vulnerability

74cms is a free + open source professional recruitment system based on PHP + MYSQL as the core development. 74cms content management system backend there are arbitrary file deletion vulnerability, attackers use the vulnerability to delete the installation of the generated install.lock can be...

JGI CMS 1.0 Script Source Code Disclosure

Title: ======= JGI CMS - Script Source Code Disclosure Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

JGI CMS 1.0 Cross Site Scripting

Title: ======= JGI CMS - DOM-Based Cross Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...