ED01-CMS cross-site scripting vulnerability

ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...

ED01-CMS arbitrary file upload vulnerability

ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary commands...

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

Ed01-Cms 代码问题漏洞

ED01-CMS is a content management system. ED01-CMS 1.0 is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary commands...

baijiacms path traversal vulnerability

baijiacms is a content management system CMS for e-commerce. baijiacms is vulnerable to a path traversal vulnerability, which stems from a directory traversal vulnerability found in database.php, which allows an attacker to delete a folder on any server with the id parameter...

WordPress 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...

Symphony Communication ServicesHp Symphony 代码问题漏洞

Symphony is a PHP MySQL-based, open source content management system CMS that uses XML and XSLT as its backbone. symphonylibtoolkitclass.xmlelement.php in Symphony version 2.7.10 is vulnerable to XXE. An attacker could exploit this vulnerability to cause an information disclosure or denial of...

Monstra Remote Code Execution Vulnerability (CNVD-2021-94964)

Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...

Monstra CMS 代码问题漏洞

Monstra is a lightweight content management system CMS. /admin/index.php?id=themes in Monstra version 3.0.4...

Macrob7 Macs Framework Cms SQL Injection Vulnerability

Macrob7 Macs Framework Cms is an open source Cms framework from the personal developer Macdonald Terrence Robinson. version 1.14 of the Macrob7 Macs Framework Content Management System is vulnerable to SQL injection, which allows attackers to SQL injection can be performed via the "roleId"...

Chi-Chen Technology Cct95 Chichen Tech Cms SQL Injection Vulnerability

Chi-Chen Technology Cct95 Chichen Tech Cms is a content management system of China's Chi-Chen Technology Chi-Chen Technology. A security vulnerability exists in Chichen Tech CMS, which stems from multiple SQL injection vulnerabilities found in the product list.php file via the id and cid...

DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81100)

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...

DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81098)

DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...

CVE-2020-36498

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...

CVE-2020-23048

SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting XSS vulnerability in the component AddEvent.php via the name and comment parameters...

CVE-2020-23047

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...

CVE-2020-23047

CVE-2020-23047 corresponds to a cross-site scripting (XSS) vulnerability in the Macrob7 Macs Framework Content Management System (CMS) version 1.14f, specifically in the search input field of the search module. Multiple connected sources confirm the issue and identify the affected product and ver...

CVE-2020-23049

Fork CMS Content Management System v5.8.0 is affected by a cross-site scripting (XSS) vulnerability in the Displayname field when using Add, Edit, or Register. The root cause is improper encoding/input handling of the Displayname field, enabling attackers to inject and execute arbitrary web scrip...

Fork CMS 跨站脚本漏洞

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork CMS Content Management System version 5.8.0, which can be exploited by an attacker to...

Macrob7 Macs Framework Content Management System 跨站脚本漏洞

Zenar Content Management System is an open source content management system CMS from the Zenar team. A cross-site scripting vulnerability exists in Macrob7 Macs Framework Content Management System version 1.14, which can be exploited by an attacker via the search input field of the search module...