128 matches found
CuppaCMS 安全漏洞
CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS version 1.0, which stems from the vulnerability of the component cuppa/api/index.php to LFI attacks...
CVE-2022-37191: Inclusion of Functionality from Untrusted Control Sphere
The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
Design/Logic Flaw
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
Cross site scripting
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
CVE-2022-38296 (Cuppa CMS v1.0) : The connected sources confirm an arbitrary file upload vulnerability via the File Manager. Nuclei indicates the impact could be remote code execution on the affected system. The CVE entry lists a 9.8 CVSS v3.1 score. Remediation guidance in the connected document...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38295
CVE-2022-38295 affects Cuppa CMS v1.0. The vulnerability is a cross-site scripting flaw in the Add New Group workflow, exploitable via a crafted payload in the Name field at /table_manager/view/cu_user_groups, allowing execution of arbitrary web scripts/HTML. Public docs identify the impact as ex...
CVE-2022-38296: Unrestricted Upload of File with Dangerous Type
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
PT-2022-24345 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function at the "/table manager/view/cu user groups" API endpoin...
PT-2022-24346 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue is related to an arbitrary file upload vulnerability via the File Manager. This allows for potential malicious file uploads. Recommendations: For Cuppa CMS version 1.0, consider disabling the File...
CVE-2022-38295: Improper Neutralization of Input During Web Page Generation
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...