Cross site scripting

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

CVE-2015-7347

CVE-2015-7347 affects ZCMS 1.1 JavaServer Pages Content Management System. The connected sources confirm a cross-site scripting (XSS) vulnerability in ZCMS 1.1 (no detailed root cause in the provided docs). Public exploit references exist (Exploit-DB and PacketStorm) describing XSS and SQL Inject...

CVE-2015-7347

Cross-site scripting XSS vulnerability in ZCMS JavaServer Pages Content Management System 1.1...

SQL Injection Vulnerability in State Micro CMS Station Messages

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in State Micro CMS site messages. The vulnerability is due to the failure of the system to effectively...

Cross-site scripting vulnerability in S-CMS /admin/help.asp page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A cross-site scripting vulnerability exists in the /admin/help.asp page in S-CMS v3.0 build20170911. Allows an attacker to construct XSS statements and perform pop-up box operations to obtain sensitive...

CVE-2017-1002002

Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/...

74cms content management system backend existence of arbitrary file deletion vulnerability

74cms is a free + open source professional recruitment system based on PHP + MYSQL as the core development. 74cms content management system backend there are arbitrary file deletion vulnerability, attackers use the vulnerability to delete the installation of the generated install.lock can be...

JGI CMS 1.0 Cross Site Scripting

Title: ======= JGI CMS - DOM-Based Cross Site Scripting Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

JGI CMS 1.0 Script Source Code Disclosure

Title: ======= JGI CMS - Script Source Code Disclosure Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users working in a collaborative environment. CMS...

UCMS has an override access vulnerability

UCMS is a simple open source content management system. UCMS version 1.4.3 suffers from an override access vulnerability, which can be exploited by an attacker to override the right to modify, add, or delete administrator users...

BlackCat CMS Arbitrary PHP Code Execution Vulnerability

BlackCat CMS is a PHP5, HTML5 content management system. An arbitrary PHP code execution vulnerability exists in the backend/addons/install.php file in BlackCat CMS, which can be exploited by remote attackers to execute arbitrary PHP code via a ZIP archive containing the .php file...

BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2017-24888)

BlackCat CMS is a PHP5, HTML5 content management system. A cross-site scripting vulnerability exists in the backend/settings/ajaxsavesettings.php file in BlackCat CMS, which can be exploited by remote attackers via the site title or site footer fields...

SQL Injection Vulnerability in UCMS

UCMS is a simple open source content management system . UCMS version 1.4.3 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2017-13778

Fiyo CMS 2.0.7 has XSS in dapur\apps\appconfig\sysconfig.php via the sitename parameter...

Smartwebsites SmartCMS Cross-Site Scripting Vulnerability

Smartwebsites SmartCMS is a Content Management System CMS from Smartwebsites Cyprus. The system provides online content management, user management and document management. A cross-site scripting vulnerability exists in Smartwebsites SmartCMS version 2. A remote attacker can exploit this...

SQL Injection Vulnerability in CMS ArticleAction.class.php Page

Fargo CMS is a marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the CMS ArticleAction.class.php page. The vulnerability is due to the system flag parameter does not filter the data submitted by the user, a remote attacker c...

Cross-site scripting vulnerability in CmsEasy frontend

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. A cross-site scripting vulnerability exists in the CmsEasy frontend, which can be exploited by attackers to execute arbitrary JavaScript code...

Philex CMS 0.2 Directory Traversal Vulnerability

Exploit for php platform in category web applications Title: ======= Philex CMS - Directory Traversal Introduction: ============== A content management system CMS is a computer application that supports the creation and modification of digital content. It is often used to support multiple users...

SQL Injection Vulnerability in UCMS 'ajax.php' File

UCMS is a simple open source content management system. A SQL injection vulnerability exists in the UCMS 'ajax.php' file, which can be exploited by attackers to obtain sensitive information about the database...

Arbitrary code writing vulnerability in phpmywind cms

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . An arbitrary code write vulnerability exists in phpmywind cms, which can be exploited by attackers to gain service privileges...