Lucene search
+L

4 matches found

BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•20 views

SiberianCMS HTTP GET Request Handler XSS

The vulnerability of the HTTP GET Request Handler component in the /app/sae/design/desktop/flat file of the software for developing mobile applications in SiberianCMS is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor ...

5CVSS5.7AI score0.00394EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•20 views

PT-2025-5982

Name of the Vulnerable Software and Affected Versions SiberianCMS version 4.20.6 Description A problem was found in SiberianCMS, affecting some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. This leads to cross-site scripting. The attack...

6.1CVSS4.7AI score0.00394EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•17 views

SiberianCMS 代码注入漏洞

SiberianCMS is an open source and free application manufacturing software from SiberianCMS Inc. A code injection vulnerability exists in SiberianCMS version 4.20.6, which originates in the file /app/sae/design/desktop/flat of the component HTTP GET request handler can lead to a cross-site scripti...

6.1CVSS5AI score0.00394EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•6 views

CVE-2025-1105: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched...

6.1CVSS3.7AI score0.00394EPSS
SaveExploits0References1
Rows per page
Query Builder