Lucene search
+L

9 matches found

NVD
NVD
added 2024/04/29 6:15 p.m.23 views

CVE-2024-33338

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

7.3CVSS5.7AI score0.00971EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/04/29 12:00 a.m.10 views

jizhicms 安全漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from Extreme Networks Technology, China. A security vulnerability exists in jizhicms version v.2.5.4. A remote attacker could exploit the vulnerability to obtain sensitive information via a specially...

7.3CVSS6.4AI score0.00971EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2024/04/29 12:00 a.m.23 views

CVE-2024-33338

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

6AI score0.00971EPSS
SaveExploits1References3
CVE
CVE
added 2024/04/29 12:00 a.m.69 views

CVE-2024-33338

The jizhicms version v.2.5.4 (an open-source content management system) is vulnerable to a Cross Site Scripting (XSS) flaw. A remote attacker can exploit this by sending a specially crafted article publication request to obtain sensitive information. At this time, no newer version containing a fi...

5.9AI score0.00971EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/03/27 12:00 a.m.11 views

PT-2020-15048 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 6.0.26 and prior OTRS versions 7.0.15 and prior Description: The issue allows an attacker to craft an article with a link to the customer address book containing malicious JavaScript content. When an agent open...

9.8CVSS7.1AI score0.99215EPSS
SaveExploits19References148
OSV
OSV
added 2017/06/24 5:29 p.m.14 views

CVE-2017-9848

SQL injection vulnerability in CInfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element...

9.8CVSS6.1AI score0.01407EPSS
SaveExploits0References3
seebug.org
seebug.org
added 2007/03/15 12:00 a.m.38 views

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)

No description provided by source. / NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 &nb...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/03/12 12:00 a.m.29 views

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)

Exploit for unknown platform in category remote exploits ============================================================ NewsReactor 20070220 Article Grabbing Remote BoF Exploit 2 ============================================================ / NewsReactor 20070220 Article Grabbing Remote Buffer...

7.1AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/11/24 12:00 a.m.39 views

TIN: Multiple buffer overflows

Background TIN is a threaded NNTP and spool based UseNet newsreader for a variety of platforms. Description Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

7.5CVSS7.3AI score0.02881EPSS
SaveExploits0
Rows per page
Query Builder