EasyCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-02517)

EasyCMS is a scalable lightweight open source content management system CMS written in PHP. EasyCMS 1.5 version of the cross-site request forgery vulnerability , remote attackers can use index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI to exploit the...

CVE-2019-6294

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

CVE-2019-6294

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

Cross site request forgery (csrf)

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

CVE-2019-6294

The connected sources confirm a CSRF vulnerability in EasyCMS 1.5, exploitable via the URI index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent. Affected product is EasyCMS 1.5; no versioned fixes or remediation steps are provided in the supplied documents. No exploit...

CVE-2019-6294

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

CVE-2019-6294: Cross-Site Request Forgery (CSRF)

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI...

CVE-2018-17113

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

CVE-2018-17113

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

Design/Logic Flaw

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

CVE-2018-17113

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

CVE-2018-17113

CVE-2018-17113 : The vulnerability concerns EasyCMS 1.5 in App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf, where XSS can be triggered via the uploadifyID or movieName parameter. This is tied to CVE-2018-9173. Connected sources corroborate an XSS issue affecting the uploa...

CVE-2018-17113: Improper Neutralization of Input During Web Page Generation

App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-19558)

EasyCMS is a scalable lightweight open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in the App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf file in EasyCMS version 1.5. The vulnerability can be exploited by remote attacke...

CVE-2018-16773

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field...

CVE-2018-16773

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field...

Cross site scripting

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field...

CVE-2018-16773

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field...

CVE-2018-16773

The CVE-2018-16773 entry describes a Cross-Site Scripting (XSS) vulnerability in EasyCMS 1.5. The issue is triggered via a crafted payload in the content field accessed through index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent, implying an injection flaw in a web-faci...

CVE-2018-16773: Improper Neutralization of Input During Web Page Generation

EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field...