4391 matches found
CVE-2022-29647
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
TPCMS 代码问题漏洞
TPCMS, an open source content management system from the individual developers of Source of Happiness, is vulnerable to an arbitrary file upload vulnerability in version v3.2, which stems from a lack of validation of uploaded files by the application. An attacker could exploit this vulnerability ...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dlprint.php. No detailed vulnerability details are provided at this time...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...
Mozilla: Uninitialized variable leads to invalid memory read
The Mozilla Foundation Security Advisory describes this flaw as: A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption...
Mozilla: Uninitialized variable leads to invalid memory read
The Mozilla Foundation Security Advisory describes this flaw as: A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption...
Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs Vulnerability Details CVEID:CVE-2022-21341 DESCRIPTION: An unspecified...
Exploit for SQL Injection in Duplicate_Post_Project Duplicate_Post
It is an offensive tool for Windows. The repository contains a P...
CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45398)
CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/save for...
CVE-2022-30500
Jfinal cms 5.1.0 is vulnerable to SQL Injection...
CVE-2021-42656
SiteServer CMS V6.15.51 is affected by a Cross Site Scripting XSS vulnerability...
Lumidek Associates Simple Food Website 跨站请求伪造漏洞
Lumidek Associates Simple Food Website is a Simple Food Website CMS. version 1.0 of Lumidek Associates Simple Food Website is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately validate that the request is from a trusted user. An attacker could...
@chargeover/strapi (0.0.1-rc1.1), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +3 more potentially affected by CVE-2022-30618 via @strapi/strapi (>=4.0.0-beta.0, <=4.1.8)
@strapi/strapi NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =0.9.0, =0.9.2 - sveltekit-strapi 0.1.0 Source cves: CVE-2022-30618 Source advisory: OSV:GHSA-VGJ7-895J-GPR6...
WBCE CMS 跨站脚本漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. version 1.5.2 of WBCE CMS contains a cross-site scripting vulnerability that can be exploited to cause a cross-site scripting XSS attack via the \admin\pages\sectionssave.php namesection2 parameter...
EC-CUBE Easy Blog for EC-CUBE4 Cross-Site Request Forgery Vulnerability
EC-CUBE Easy Blog for EC-CUBE4 is a component of the content management system from EC-CUBE Japan. EC-CUBE Easy Blog for EC-CUBE4 1.0.1 and earlier versions are vulnerable to cross-site request forgery, which stems from insufficient authentication of the source of HTTP requests. A remote,...
automad cross-site scripting vulnerability
automad is a flat file content management system and template engine. automad version 1.10.9 and prior versions contain a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...
Crafter CMS 安全漏洞
Crafter CMS is an open source content management system CMS for digital experience applications. A security vulnerability exists in Crafter CMS. An attacker could exploit the vulnerability to lock content items...
ftcms arbitrary file writing vulnerability
ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...
