135 matches found
Cross site scripting
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
CVE-2023-48986
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...
PT-2024-13668
Name of the Vulnerable Software and Affected Versions CU Solutions Group CUSG Content Management System CMS versions prior to 7.75 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted...
CVE-2023-48987
CVE-2023-48987 : The CU Solutions Group (CUSG) Content Management System (CMS) versions prior to 7.75 have a Blind SQL Injection in the pages.php component. A remote attacker can send a crafted script to exploit this, potentially executing arbitrary code, escalating privileges, and accessing sens...
CVE-2023-48987
Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...
CU Solutions Group Content Management System Security Vulnerability
CU Solutions Group Content Management System CUSG CMS is a content management system from CU Solutions Group, Inc. A security vulnerability exists in CU Solutions Group Content Management System versions prior to v.7.75. A remote attacker can exploit this vulnerability to execute arbitrary code,...
CVE-2023-48987: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...
CVE-2023-48986
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...
CVE-2023-48986
CVE-2023-48986 is an XSS vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) prior to version 7.75. The issue affects the users.php component and can allow a remote attacker to execute arbitrary script, potentially escalate privileges and access sensitive information. Root ...
CVE-2023-48985
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
CVE-2023-48985: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
CVE-2023-48985
CU Solutions Group (CUSG) Content Management System (CMS) is affected in versions prior to 7.75 by a Cross Site Scripting (XSS) vulnerability. The issue occurs via a crafted script to the login.php component, enabling a remote attacker to execute arbitrary code, escalate privileges, and disclose ...
CVE-2023-48985
Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component...
CVE-2023-48987
Blind SQL Injection vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component...
PT-2024-4033 · Cu Solutions · Cu Solutions Group Content Management System
Name of the Vulnerable Software and Affected Versions: CU Solutions Group CUSG Content Management System CMS versions prior to 7.75 Description: The issue is related to a Blind SQL Injection vulnerability in the pages.php component, which can be exploited by a remote attacker to execute arbitrary...
TOTOLINK EX1200T 安全漏洞
TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK EX1200T version V4.1.2cu.5232B20210713, which stems from the main method failing to properly filter construct command special characters, commands, and so on. An...
CVE-2023-36954
TOTOLINK CP300+ V5.2cu.7594B20200910 and before is vulnerable to command injection...
PT-2023-25755 · Totolink · Totolink Cp300+
Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300+ versions = V5.2cu.7594 B20200910 Description: A stack overflow issue was discovered in the UploadCustomModule function via the File parameter. Recommendations: For TOTOLINK CP300+ versions = V5.2cu.7594 B20200910, consider...
