162 matches found
CVE-2025-6870: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23979
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23981
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...
CVE-2020-20122
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...
CVE-2024-10356: Exposure of Sensitive Information to an Unauthorized Actor
The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
Cross site scripting
Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...
CVE-2024-25297
Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...
CVE-2024-25297: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php...
CVE-2024-25297
CVE-2024-25297 is a Cross Site Scripting (XSS) vulnerability in Bludit CMS 3.15 exploitable via the endpoint edit-content.php . Multiple connected sources describe that remote attackers can execute arbitrary code and access sensitive information through this vector. Exploitation details in public...
Sql injection
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...
CVE-2020-20413: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...
CVE-2020-20413
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle function in admin/content.php...
CVE-2020-20413
CVE-2020-20413 affects WUZHICMS v4.1.0. A SQL injection in the checktitle() function of admin/content.php enables a remote attacker to execute arbitrary code. The vulnerability is described across multiple security feeds as a high-severity issue (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No...
CVE-2020-20122
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...
Sql injection
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...
CVE-2020-20122: Improper Neutralization of Special Elements used in an SQL Command
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle function in /coreframe/app/content/admin/content.php...
Wuzhi WUZHI CMS SQL注入漏洞
WUZHI CMS WUZHI CMS is a high-performance open source content management system , support for LNAMP architecture , suitable for portals , corporate Web site , mobile site , microblogging promotion. WUZHI CMS 4.1.0 version of the /coreframe/app/content/admin/content.php in the checktitle function...
CVE-2021-28088: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...
