CVE-2023-1303

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. Th...

UCMS 代码问题漏洞

UCMS is a content management system written in PHP. A code issue vulnerability exists in UCMS version 1.6, which stems from an unknown security issue in the file sadmin/fileedit.php in the component System File Management Module, which could lead to unrestricted uploads via the parameter id...

PT-2023-16875 · Ucms · Ucms

Name of the Vulnerable Software and Affected Versions: UCMS version 1.6 Description: A critical issue affects the System File Management Module, specifically the file sadmin/fileedit.php, allowing for unrestricted upload due to the manipulation of the file argument. This can be initiated remotely...

Microweber Cross-site Scripting vulnerability

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...

GHSA-MV37-XRMC-HF64 Microweber Cross-site Scripting vulnerability

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...

CVE-2021-32857

CVE-2021-32857 affects Cockpit versions 0.12.2 and earlier. The issue arises from improper HTML sanitization in the file htmleditor.js, enabling cross-site scripting (XSS). The available documents do not indicate a public patch; several sources reiterate that no fixes are known. A vendor/workarou...

CVE-2021-32856 Microweber vulnerable to Cross-site Scripting

Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...

Unauthorized Access Vulnerability in Joomla!

Joomla! is a globally recognized content management system. An unauthorized access vulnerability exists in Joomla! versions 4.0.0 through 4.2.7. The vulnerability is due to an incorrect access check in the affected versions, which can be exploited by an attacker to gain unauthorized access to the...

SUSE CVE-2021-43527

NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be impacted. Applications using N...

phpwcms file upload vulnerability (CNVD-2023-09606)

phpwcms is an open source web content management system. It is fast, easy to install and can run on any standard web server platform that supports PHP/MySQL. A file upload vulnerability exists in phpwcms version 1.9.25. A remote attacker can exploit this vulnerability to execute arbitrary code by...

mojoPortal 代码问题漏洞

mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system provides event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

Design/Logic Flaw

Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...

CVE-2023-25164 Sensitive Information leak via Script File in TinaCMS

Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...

CVE-2023-25164

The CVE-2023-25164 entry concerns Tinacms where sites built with @tinacms/cli >= 1.0.0 and

TPCMS 日志信息泄露漏洞

TPCMS is a source of happiness Source of Happiness individual developers of an open source content management system. An access control error vulnerability exists in TPCMS version 3.2. A remote attacker could exploit this vulnerability to obtain sensitive information via the application URL...

dotCMS path traversal vulnerability (CNVD-2023-11699)

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A path traversal vulnerability exists in dotCMS core, which stems from the fact that an authenticated attacker can...

CVE-2022-47740

Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...

Seltmann GmbH Content Management System 6 SQL注入漏洞

seltmann Seltmann GmbH Content Management System is a content management system from seltmann. A security vulnerability exists in Seltmann GmbH Content Management System 6. An attacker could exploit this vulnerability to perform SQL injection via /index.php...

CVE-2022-47740

CVE-2022-47740 affects Seltmann GmbH Content Management System 6. Vulnerability: SQL Injection via the /index.php endpoint. Root cause: unsafely constructed SQL query in the input handling leads to high-impact confidentiality, integrity, and availability impact (CVSS v3.1 base score 9.8). Exploit...

backdrop-contrib Basic Cart 跨站脚本漏洞

backdrop-contrib Basic Cart is a cms site for individual developers. A cross-site scripting vulnerability exists in backdrop-contrib Basic Cart. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...