The vulnerability of the Django CMS software platform for content management lies in its lack of measures to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Django CMS content management system’s software platform is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting XSS attacks...

PT-2024-10317 · 1с · Битрикс24 +1

Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is related to the UI module of the Битрикс24 business management service and the 1С-Битрикс site management system CMS, which fails to protect the web page...

Backdrop CMS 安全漏洞

Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.28.X prior to 1.28.4 and version 1.29.X prior to 1.29.2, which stems from a text formatting that allows the use of SVG markup, which makes it vulnerable to...

Farmacia 安全漏洞

Farmacia is a content management system from code-projects open source. A security vulnerability exists in Farmacia version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter name...

The vulnerability of the MediaCMS content management system, related to incorrect authorization, allows a hacker to delete directories in the file system and replace the content of user’s files.

The vulnerability of the MediaCMS content management system is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to delete directories in the file system and replace the content of user’s files...

CVE-2024-52600 Statamic CMS has Path Traversal in Asset Upload

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...

CVE-2024-52600 Statamic CMS has Path Traversal in Asset Upload

Statmatic is a Laravel and Git powered content management system CMS. Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location different than what was configured. The issue affects front-end forms with assets fields and other plac...

AVSCMS 安全漏洞

AVSCMS is a content management system from AVSCMS Open Source. A security vulnerability exists in AVSCMS version v8.2.0 that stems from weak default credentials that contain an administrator account...

Code-Projects Jonnys Liquor 跨站脚本漏洞

jonnys Liquor is a content and management system. jonnys Liquor suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web script or HTML by...

SDCMS 安全漏洞

SDCMS is a PHP and MySQL based enterprise website content management system CMS from China Vivid Network SDCMS. A security vulnerability exists in SDCMS version 2.8, which originates from the theme.php file containing a command execution vulnerability...

07FLYCMS 安全漏洞

07FLYCMS is a free and open source content management system CMS from China Zero Takeoff 07FLY, which can be used independently to meet the needs of various types of enterprise website development and construction! A security vulnerability exists in 07FLYCMS version V1.3.9, which originates from...

PT-2024-34417 · Sdcms · Sdcms

Name of the Vulnerable Software and Affected Versions: SDCMS version 2.8 Description: The theme.php file in SDCMS has a command execution vulnerability that allows for the execution of system commands. Recommendations: For SDCMS version 2.8, consider disabling the theme.php file or restricting it...

WEB-Sekolah 安全漏洞

WEB-Sekolah is a content management system by the individual developer Roma Debrian. A security vulnerability exists in WEB-Sekolah version 1.0 due to a SQL injection in the parameter Name...

WEB-Sekolah 安全漏洞

WEB-Sekolah is a content management system by the individual developer Roma Debrian. A security vulnerability exists in WEB-Sekolah version 1.0, which stems from improper handling of the parameter UsernameBaru/Password and can lead to cross-site scripting attacks...

CVE-2024-10758 code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection

A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...

CVE-2024-10758

CVE-2024-10758 affects code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. The vulnerability is a SQL injection in the index.php area triggered by manipulating the user_name parameter, with remote exploitation indicated. Public disclosures exist (e.g., Exploit-DB and PacketSt...

PT-2024-16521 · Unknown +1 · Code-Projects/Anirbandutta9 Content Management System +1

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the software, affecting an unknown part of the file /index.php. The manipulation of the user name argument leads to SQL...

ZZCMS SQL Injection Vulnerability (CNVD-2024-43213)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in ZZCMS version 2023, which originates from the lack of validation of the parameter phome in file 3/Ebak5.1/upload/phome.php for external SQL statements, which can be exploited by an attacke...

wtcms cross-site scripting vulnerability

wtcms is a ThinkPHP-based content management system CMS. A cross-site scripting vulnerability exists in version 1.0 of wtcms, which stems from unprocessed application parameters in the plupload method in the file AssetController.class.php, and can be exploited by an attacker to execute arbitrary...

pb-cms 跨站脚本漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan personal developer. A cross-site scripting vulnerability exists in versions prior to pb-cms 2.0.1, which originates from the file /adminarticle/edit?id=2 of the component Edit Article Handler that can lead to...