265 matches found
CVE-2022-39839
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post...
CVE-2022-39839
CVE-2022-39839 : Cotonti Siena 0.9.20 is affected by a stored XSS vulnerability via forum posts. The CVE entry documents the issue and the NVD CVSSv3.1 base score of 4.8 (Medium), with network attack vector, low attack complexity, privileges required high, user interaction required, and a changed...
CVE-2022-39840
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message DM...
CVE-2022-39840
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message DM...
CVE-2022-39840
CVE-2022-39840 affects Cotonti Siena 0.9.20, enabling stored XSS via direct messages (DM). Impact: admin-level content processing could be manipulated to execute scripts; CVSS 3.1 base score 4.8 (MEDIUM) with network vector, low attack complexity, user interaction required. Root cause details are...
PT-2022-25029 · Unknown · Cotonti Siena
Name of the Vulnerable Software and Affected Versions: Cotonti Siena version 0.9.20 Description: The issue allows admins to conduct stored XSS attacks via a forum post. Recommendations: For Cotonti Siena version 0.9.20, update to a version that fixes this issue, as using the current version may...
Cotonti Siena 跨站脚本漏洞
Cotonti Siena is a powerful open source web development framework and content manager from Cotonti Open Source. A security vulnerability exists in Cotonti Siena version 0.9.20, which originates from allowing administrators to conduct stored XSS attacks via forum posts...
CVE-2022-39840: Improper Neutralization of Input During Web Page Generation
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message DM...
PT-2022-25031 · Unknown · Cotonti Siena
Name of the Vulnerable Software and Affected Versions: Cotonti Siena version 0.9.20 Description: The issue allows admins to conduct stored XSS attacks via a direct message DM. Recommendations: For Cotonti Siena version 0.9.20, update to a version that fixes this issue, as using direct messages fo...
Cotonti Siena 跨站脚本漏洞
Cotonti Siena is a powerful open source web development framework and content manager from Cotonti Open Source. A security vulnerability exists in Cotonti Siena version 0.9.20, which stems from a stored XSS attack that allows administrators to conduct direct messages DM...
CVE-2022-39839: Improper Neutralization of Input During Web Page Generation
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post...
Cotonti Siena 0.9.19 Cross Site Scripting
Exploit Title: Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting Date: 2021-15-06 Exploit Author: Fatih İLGİN Vendor Homepage: cotonti.com Vulnerable Software: https://www.cotonti.com/download/siena0919 Affected Version: 0.9.19 Tested on: Windows 10 Vulnerable Parameter Type: POST...
Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
Exploit Title: Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting Date: 2021-15-06 Exploit Author: Fatih İLGİN Vendor Homepage: cotonti.com Vulnerable Software: https://www.cotonti.com/download/siena0919 Affected Version: 0.9.19 Tested on: Windows 10 Vulnerable Parameter Type: POST...
Cotonti Siena 0.9.19 - (maintitle) Stored Cross-Site Scripting Vulnerability
Exploit Title: Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting Exploit Author: Fatih İLGİN Vendor Homepage: cotonti.com Vulnerable Software: https://www.cotonti.com/download/siena0919 Affected Version: 0.9.19 Tested on: Windows 10 Vulnerable Parameter Type: POST Vulnerable Paramete...
Cotonti 0.9.13 - SQL Injection Vulnerability
No description provided by source...
cotonti cms 0.9.4 - Multiple Vulnerabilities
No description provided by source. Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities Vendor: Cotonti Team Product web page: http://www.cotonti.com Affected version: 0.9.4 Siena Summary: Cotonti is a powerful open-source web development framework and content manager with a focus on security, spee...
SQL Injection in Cotonti
Advisory ID: HTB23164 Product: Cotonti Vendor: Cotonti Team Vulnerable Versions: 0.9.13 and probably prior Tested Version: 0.9.13 Vendor Notification: July 10, 2013 Vendor Patch: July 17, 2013 Public Disclosure: July 31, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference: CVE-2013-4789...
CVE-2013-4789
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php...
