CVE-2020-18262

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...

CVE-2020-18261

An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands...

CVE-2020-18259

ED01-CMS v1.0 contains a reflected XSS in the sposts.php component. Adversaries can inject arbitrary scripts/HTML via crafted payloads in the Post title or Post content, which are reflected and may affect page/script contexts. The CVE-2020-18259 entry cites this vulnerability with both NVD and ot...

Ed01-Cms 跨站脚本漏洞

ED01-CMS is a content management system. A cross-site scripting vulnerability exists in the sposts.php component of ED01-CMS 1.0, which can be exploited by attackers to execute arbitrary web scripts or HTML by inserting specially crafted loads into the Post title or Post content fields...

XSS Vulnerability in ED01-CMS Content Management System

ED01-CMS is a content management system. An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

XSS Vulnerability in ED01-CMS

ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

SQL Injection Vulnerability in ED01-CMS Content Management System (CNVD-2019-34668)

ED01-CMS is a content management system. The ED01-CMS content management system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in ED01-CMS Content Management System

ED01-CMS is a content management system. The ED01-CMS content management system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...