4 matches found
Sql injection
phpkaiyuancms PhpOpenSourceCMS POSCMS V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajaxsavedraft function with the dir parameter...
7.5CVSS9.9AI score0.01582EPSS
SaveExploits1References1Affected Software1
CVE-2017-11629
dayrui FineCms through 5.0.10 has Cross Site Scripting XSS in controllers/api.php via the function parameter in a c=api&m=data2 request...
6.1CVSS6AI score0.01937EPSS
SaveExploits1References1
20