CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS 반사형 XSS v3.4.16 작성자: Sergio 설명: October v.3.4.16 설치 과정의 Cross-Site Scripting XSS 취약점으로 인해 로컬 공격자가 dbhost 필드에 주입된 조작된 페이로드를 통해 임의의 웹 스크립트를 실행할 수 있습니다. 공격 벡터: dbhost 필드의 설치 정화 과정에서 발생하는 취약점으로 인해 JavaScript 코드가 주입될 수 있습니다. POC: 설치 과정에서 dbhost 필드에 XSS 페이로드를 입력하고 다음을 클릭하면 XSS 팝업이 나타납니다. XS...

CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation

Subrion CMS 반사형 XSS v4.2.1 저자: Sergio 설명: Subrion CMS v.4.2.1 설치 과정에서 발생하는 다중 크로스 사이트 스크립팅XSS 취약점으로 인해 로컬 공격자가 dbhost, dbname, dbuser, adminusername 및 adminemail에 주입된 조작된 페이로드를 통해 임의의 웹 스크립트를 실행할 수 있습니다. 공격 벡터: dbhost, dbname, dbuser, adminusername 및 adminemail의 설치 정화 과정에서 취약점이 존재하여 JavaScript 코드...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

EUVD-2016-10278

Malware in sbrugna...

EUVD-2023-2393

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2012-0937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL databas...

GHSA-646R-8FCC-P82R Subrion CMS vulnerable to Cross-site Scripting

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

CVE-2023-43875: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

CVE-2023-43876

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

October CMS Cross-Site Scripting Vulnerability

October CMS is an open source content management system CMS based on PHP and the Laravel web application framework. A cross-site scripting vulnerability exists in October CMS version v.3.4.16. An attacker can exploit this vulnerability to execute arbitrary web script by injecting a specially...

CVE-2023-43876: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field...

Design/Logic Flaw

GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...

CVE-2018-14476

CVE-2018-14476 affects GeniXCMS 1.1.5 and is a cross-site scripting vulnerability exploitable via the installation step 1 parameters. The root cause is reflected in the documentation as XSS through the dbuser or dbhost fields submitted during step 1 of installation, allowing arbitrary web script ...

CVE-2018-14476

GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...

CVE-2018-14476: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...

CVE-2015-7570: Server-Side Request Forgery (SSRF)

Multiple server-side request forgery SSRF vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodblite/tests/testadodblite.php, libs/org/adodblite/tests/testdatadictionary.php, or...